Data-Oblivious ML Accelerators Using Hardware Security Extensions

We present Dolma, which applies dynamic information flow tracking (DIFT) to the Gemmini matrix multiplication accelerator. With the BliMe CPU extensions, it efficiently guarantees client data confidentiality, even in the presence of malicious/vulnerable software and side channel attacks on servers.