3 ms·
Until we get workable homomorphic encryption, the bit about encrypted machine images is (charitably) optimistic. I wrote about this a year ago: http://blackket
by regularfry 11y ago
Until we get workable homomorphic encryption, the bit about encrypted machine images is (charitably) optimistic. I wrote about this a year ago: http://blackkettle.org/blog/2015/02/19/youve-got-to-trust-your-vm-host/ http://blackkettle.org/blog/2015/02/19/youve-got-to-trust-yo...
- anonymousDan 11y agoUnless you're willing to trust the hardware manufacturer, at which point something like Intel SGX could be a runner.
- regularfry 11y agoYou also have to trust your VM host not to provide an emulated SGX (which is what https://github.com/sslab-gatech/opensgx https://github.com/sslab-gatech/opensgx is, unless I'm very much mistaken).
- anonymousDan 11y agoI think you're mistaken. Intel provides infrastructure to ensure you're talking to an enclave running on an actual Intel machine, and you can then do a remote attestation to verify the contents of that enclave.