Trusted Execution Environments (TEEs) have enabled confidential Byzantine Fault-Tolerant (BFT) consensus systems with confidentiality and improved scalability. However, TEEs do not provide state continuity: during recovery, a compromised host can roll back a crashed enclave to a stale persistent state, significantly threatening both safety and availability. Existing defenses face a fundamental tradeoff: they either impose substantial overhead on critical consensus paths, reducing throughput and increasing latency, or incur prolonged recovery delays, hurting availability. We present the first systematic taxonomy of rollback-resilient recovery for confidential BFT consensus, distilling prior approaches into four categories. We further expose their inherent limitations. Guided by this detailed analysis, we design CHIMERA, a protocol-aware recovery framework that breaks this tradeoff. Our key insight is that rollback protection in consensus systems should not be uniform. Different types of persistent states differ fundamentally in their state distribution, update behavior, and representation form. CHIMERA separates persistent state into metadata and logs according to these protocol-level properties and applies distinct recovery mechanisms to each type. We formally model CHIMERA in Maude and verify its safety and liveness properties. We implement it on Braft and ZooKeeper using Intel TDX, and evaluate it in both LAN and WAN settings. Results show that CHIMERA achieves higher throughput, lower recovery latency, and better availability than state-of-the-art rollback-resilient baselines.

翻译：可信执行环境（TEEs）已支持具有机密性和更高可扩展性的机密拜占庭容错（BFT）共识系统。然而，TEEs无法提供状态连续性：在恢复过程中，被攻陷的主机可将崩溃的飞地回滚至过时的持久状态，严重威胁系统安全性与可用性。现有防御方案面临根本性权衡：要么在关键共识路径上引入巨大开销，降低吞吐量并增加延迟；要么导致过长的恢复延迟，损害可用性。我们首次提出机密BFT共识回滚弹性恢复的系统化分类法，将既有方法归纳为四类，并进一步揭示其固有限制。基于这一深入分析，我们设计了CHIMERA——一种打破上述权衡的协议感知恢复框架。核心洞察在于：共识系统中的回滚保护不应采用统一策略。不同类型的持久状态在状态分布、更新行为和表示形式等方面存在根本差异。CHIMERA根据这些协议级属性将持久状态划分为元数据与日志，并对每种类型应用差异化恢复机制。我们使用Maude对CHIMERA进行形式化建模，验证其安全性与活性属性。基于Intel TDX在Braft和ZooKeeper上实现该框架，并在局域网与广域网环境下进行评测。结果表明，相较于最先进的回滚弹性基线方案，CHIMERA实现了更高吞吐量、更低恢复延迟及更优可用性。