Verifiable Encryption Based on Trusted Execution Environment

An computing device for verifying a property of plaintext using ciphertext, the computing device comprising:

• a memory storage for storing instructions, the memory storage comprising secure memory and non-secure memory;
• and
• one or more processors in communication with the memory storage, wherein the one or more processors execute the instructions for:
• receiving, by a trusted execution environment (TEE) of the computing device, the ciphertext;
• decrypting, by the TEE, the ciphertext to generate the plaintext using a private encryption key of an encryption key pair comprising a public encryption key and the private encryption key;
• generating, by the TEE, a validation result verifying a property of the plaintext;
• generating, by the TEE, a digitally signed validation result by encrypting the validation result using a private signing key of a signing key pair comprising a public signing key and the private signing key, the private signing key retrieved from the secure memory of the computing device, the secure memory being only accessible by the TEE;
• and
• transmitting, by the computing device, the digitally signed validation result.

A computer-readable storage medium comprising secure memory and non-secure memory, the computer-readable storage medium having instructions stored thereon that, when executed by one or more processors of a computing device, cause the computing device to perform operations for verifying a property of plaintext using ciphertext, the operations comprising:

• receiving, by a trusted execution environment (TEE) of the computing device, the ciphertext;
• decrypting, by the TEE, the ciphertext to generate the plaintext using a private encryption key of an encryption key pair comprising a public encryption key and the private encryption key;
• generating, by the TEE, a validation result verifying a property of the plaintext;
• generating, by the TEE, a digitally signed validation result by encrypting the validation result using a private signing key of a signing key pair comprising a public signing key and the private signing key, the private signing key retrieved from the secure memory of the computing device, the secure memory being only accessible by the TEE;
• and
• transmitting, by the computing device, the digitally signed validation result.