{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,11]],"date-time":"2026-03-11T16:37:50Z","timestamp":1773247070528,"version":"3.50.1"},"reference-count":64,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,5,1]],"date-time":"2022-05-01T00:00:00Z","timestamp":1651363200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-009"},{"start":{"date-parts":[[2022,5,1]],"date-time":"2022-05-01T00:00:00Z","timestamp":1651363200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-001"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100006190","name":"Research and Development","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100006190","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,5]]},"DOI":"10.1109\/sp46214.2022.9833650","type":"proceedings-article","created":{"date-parts":[[2022,7,27]],"date-time":"2022-07-27T19:28:05Z","timestamp":1658950085000},"page":"650-665","source":"Crossref","is-referenced-by-count":19,"title":["Annotating, Tracking, and Protecting Cryptographic Secrets with CryptoMPK"],"prefix":"10.1109","author":[{"given":"Xuancheng","family":"Jin","sequence":"first","affiliation":[{"name":"Shanghai Jiao Tong University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xuangan","family":"Xiao","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Songlin","family":"Jia","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wang","family":"Gao","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dawu","family":"Gu","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hang","family":"Zhang","sequence":"additional","affiliation":[{"name":"UC Riverside"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Siqi","family":"Ma","sequence":"additional","affiliation":[{"name":"The University of Queensland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhiyun","family":"Qian","sequence":"additional","affiliation":[{"name":"UC Riverside"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Juanru","family":"Li","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3064176.3064217"},{"key":"ref57","year":"2021","journal-title":"Intel(R) 64 and IA-32 Architectures Software Developer&#x2019;s Manual Volume 1 Basic Architecture"},{"key":"ref12","year":"2021","journal-title":"Heartbleed Bug"},{"key":"ref56","year":"2021","journal-title":"Intel\ufffd 64 and IA-32 Architectures Software Developer's Manual Volume 3 System Programming Guide"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/2663716.2663755"},{"key":"ref59","year":"2021","journal-title":"Intel\ufffd 64 and IA-32 Architectures Software Developer's Manual Volume 3A System Programming Guide"},{"key":"ref14","year":"2021","journal-title":"Protection Keys"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00087"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/3433210.3453111"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354218"},{"key":"ref11","year":"2021","journal-title":"ccrypt"},{"key":"ref55","year":"2021","journal-title":"Introduction to Intel Memory Protection Extensions"},{"key":"ref10","year":"2021","journal-title":"Apache"},{"key":"ref54","year":"2021","journal-title":"NsJail"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.30"},{"key":"ref16","article-title":"Enforcing Forward-Edge Control-Flow Integrity in GCC & LLVM","author":"tice","year":"2014","journal-title":"Proc 23rd USENIX Security Symposium (USENIX Security)"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/1506409.1506429"},{"key":"ref18","article-title":"Control Flow Integrity for COTS Binaries","author":"zhang","year":"2013","journal-title":"Proc 22nd USENIX Security Symposium (USENIX Security)"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2013.6693091"},{"key":"ref50","article-title":"Wedge: Splitting Applications into Reduced-Privilege Compartments","author":"bittau","year":"2008","journal-title":"Proc 5th USENIX Symposium on Networked Systems Design and Implementation (NSDI)"},{"key":"ref46","article-title":"Dead Store Elimination (Still) Considered Harmful","author":"yang","year":"2017","journal-title":"Proc 26th USENIX Security Symposium (USENIX Security)"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2007.77"},{"key":"ref48","article-title":"Recovering cryptographic keys from partial information, by example","author":"micheli","year":"2020","journal-title":"Cryptology ePrint Archive Report 2020\/1506 (ePrint)"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243783"},{"key":"ref42","article-title":"ERIM: Secure, Efficient In-process Isolation with Protection Keys (MPK)","author":"vahldiek-oberwagner","year":"2019","journal-title":"Proc 28th USENIX Security Symposium (USENIX Security)"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.13"},{"key":"ref44","year":"2021","journal-title":"ApacheBenchmark"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.2307\/2007970"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.8"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3302424.3303952"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813690"},{"key":"ref9","year":"2021","journal-title":"OpenSSL"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00041"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23125"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3052983"},{"key":"ref5","article-title":"libmpk: Software Abstraction for Intel Memory Protection Keys (Intel MPK)","author":"park","year":"2019","journal-title":"Proc 2019 USENIX Annual Technical Conference (USENIX ATC)"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00082"},{"key":"ref35","year":"2021","journal-title":"Libhydrogen"},{"key":"ref34","year":"2021","journal-title":"Libsodium"},{"key":"ref37","year":"2021","journal-title":"VSftpd"},{"key":"ref36","year":"2021","journal-title":"Nginx"},{"key":"ref31","article-title":"Glamdring: Automatic Application Partitioning for Intel SGX","author":"lind","year":"2017","journal-title":"Proc 26th USENIX Security Symposium (USENIX Security)"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3360583"},{"key":"ref33","year":"2021","journal-title":"GNU libc"},{"key":"ref32","year":"2021","journal-title":"jemalloc memory allocator"},{"key":"ref2","article-title":"A Method for Safekeeping Cryptographic Keys from Memory Disclosure Attacks","author":"parker","year":"2009","journal-title":"Proc 1st International Conference on Trusted Systems (INTRUST)"},{"key":"ref1","first-page":"675","author":"petitcolas","year":"2011","journal-title":"Kerckhoffs&#x2019; Principle"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359823"},{"key":"ref38","year":"2021","journal-title":"OpenSMTPD"},{"key":"ref24","year":"2021","journal-title":"Boost C++ libraries"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.12"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/186025.186041"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/359636.359712"},{"key":"ref20","article-title":"Meltdown: Reading Kernel Memory from User Space","author":"lipp","year":"2018","journal-title":"Proc 27th USENIX Security Symposium (USENIX Security)"},{"key":"ref64","year":"2021","journal-title":"Control Flow Integrity"},{"key":"ref63","year":"2021","journal-title":"The LLVM gold plugin"},{"key":"ref22","year":"2021","journal-title":"PKS Add Protection Keys Supervisor (PKS) support"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00002"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CGO.2011.5764696"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-53413-7_11"},{"key":"ref29","article-title":"DR. CHECKER: A Soundy Analysis for Linux Kernel Drivers","author":"machiry","year":"2017","journal-title":"Proc 26th USENIX Security Symposium (USENIX Security)"},{"key":"ref60","year":"2021","journal-title":"ARM Memory domains"},{"key":"ref62","year":"2021","journal-title":"clang A C Language Family Frontend for LLVM"},{"key":"ref61","year":"2021","journal-title":"Intel\ufffd 64 and IA-32 Architectures Software Developer's Manual Volume 3 System Programming Guide"}],"event":{"name":"2022 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2022,5,22]]},"end":{"date-parts":[[2022,5,26]]}},"container-title":["2022 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9833550\/9833558\/09833650.pdf?arnumber=9833650","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,11,8]],"date-time":"2023-11-08T23:09:39Z","timestamp":1699484979000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9833650\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,5]]},"references-count":64,"URL":"https:\/\/doi.org\/10.1109\/sp46214.2022.9833650","relation":{},"subject":[],"published":{"date-parts":[[2022,5]]}}}