3 ms·
Unless you're willing to trust the hardware manufacturer, at which point something like Intel SGX could be a runner.
by anonymousDan 11y ago
Unless you're willing to trust the hardware manufacturer, at which point something like Intel SGX could be a runner.
- regularfry 11y agoYou also have to trust your VM host not to provide an emulated SGX (which is what https://github.com/sslab-gatech/opensgx https://github.com/sslab-gatech/opensgx is, unless I'm very much mistaken).
- anonymousDan 11y agoI think you're mistaken. Intel provides infrastructure to ensure you're talking to an enclave running on an actual Intel machine, and you can then do a remote attestation to verify the contents of that enclave.