Cohesity, Inc.

Gyan Prakash

Sivanarayana Gaddam

Suchit Kaura

Techniques are described for protected data restoration using confidential computing. An example method comprises receiving, by a data platform implemented by a computing system, a request to restore an encrypted chunk of data, the encrypted chunk stored with first encrypted key data and second encrypted key data, receiving, by an enclave implemented in a trusted execution environment, first encrypted key data and second encrypted key data from the storage cluster, decrypting, by the enclave, the first encrypted key data to obtain the first key data and the second encrypted key data to obtain the second key data, generating, by the storage cluster, a derived data encryption key corresponding to the data encryption key based on the first key data and the second key data, and decrypting, by the storage cluster, the encrypted chunk with the derived data encryption key to generate a decrypted chunk.

Growing community of inventors

Foster City, CA, United States of America

Gyan Prakash