Users of modern data-processing services such as tax preparation or genomic screening
are forced to trust them with data that the users wish to keep secret. Ryoan1 protects secret
data while it is processed by services that the data owner does not trust. Accomplishing this
goal in a distributed setting is difficult, because the user has no control over the service
providers or the computational platform. Confining code to prevent it from leaking secrets is
notoriously difficult, but Ryoan benefits from new hardware and a request-oriented data …

… ○ Trusted computation on secret data … Ryoan makes input available Ryoan flushes all
output …