| We examine three widely-deployed security-critical services (random number generation, user authentication, and protection of data-at-rest) in the context of modern internet-scale services. Internet-scale services are de- ployed in large data centers or multitenant cloud computing environments; these services are distributed across many machines and may process billions of requests per day while providing high availability. In each case, the security services we examine were designed for a distinct (smaller scale) context and fail to provide the required security when applied to internet-scale services. For each case, we develop and evaluate new, principled designs to restore the required level of security in this large-scale computing environment. |
