Search papers, labs, and topics across Lattice.
YAVIN introduces a unified trusted computing base that extends trusted execution environments (TEEs) beyond processors to include secure processing-in-memory (PIM) execution, addressing the critical challenge of secure multi-tenant execution in edge computing. By co-designing post-quantum cryptographic algorithms with PIM implementations, YAVIN enables efficient data processing while maintaining security against untrusted memory buses. The architecture achieves over 20x speedup compared to existing PIM AES implementations, with minimal overhead for executing quantized edge-class LLMs, showcasing its practical viability for secure edge processing.
YAVIN achieves over 20x speedup in secure edge processing while maintaining robust cryptographic protections against untrusted memory.
Secure, private multi-tenant execution spanning processors, memory, and accelerators remains one of the most significant challenges in modern edge computing systems. Simultaneously, processing-in-memory (PIM) has emerged as an effective approach for reducing the Von Neumann bottleneck by moving computation closer to data. Existing trusted execution environments (TEEs) establish trust only within the processor, protecting data while it traverses untrusted resources such as the memory bus. Consequently, trusted computation cannot be performed directly within memory. We present YAVIN, a unified trusted computing base (TCB) that extends the TEE beyond the processor to encompass both processor execution and a dedicated memory region supporting trusted processing-in-memory execution while treating the memory bus as untrusted. Leveraging the dedicated protected memory regions already established by conventional TEE architectures, YAVIN enables data to be decrypted, processed, and re-encrypted by either processor or PIM execution while remaining within the TEE. To realize this unified TCB, YAVIN presents the first PIM implementations of the LightSaber KEM post-quantum cryptosystem and ASCON-128 authenticated encryption, co-designing both algorithms for efficient DRAM execution to establish and maintain shared cryptographic state. Finally, we demonstrate how cryptography-PIM co-design for tensor-based workloads reorganizes computation to satisfy the ordering constraints imposed by authenticated encryption with minimal performance overhead while simultaneously enabling bit-sliced ordering that limits temporary plaintext exposure. Compared to the latest PIM AES implementation, YAVIN achieves more than a 20x speedup while incurring only 34% and 9.3% overhead when executing INT8 and INT32 quantized edge-class LLMs, respectively, relative to plaintext execution.
