3 ms·
What's to stop someone reverse engineering the blob before it's loaded into an SGX enclave? I don't understand it very well so I could be missing something, but
by Rusky 10y ago
What's to stop someone reverse engineering the blob before it's loaded into an SGX enclave? I don't understand it very well so I could be missing something, but wouldn't that at least let someone document how the DRM works even if not running their own implementation?
- bubblethink 10y agoIt would be of no use (and the code can also be encrypted for additional obfuscation). There is no private data in the blob. The blob communicates to mothership once it's safe inside the enclave, and that's when sensitive data is transmitted over an encrypted channel which only the blob can decrypt inside the enclave.
- ndesaulniers 10y agoDigital signatures. Not that I actually know how it's implemented, but I would expect someone like Netflix to pay Intel for the build infrastructure to be able to build signed blobs that the SGX will load. The "someone" in your hypothetical can modify the blob, but then they won't be able to resign the blob, so SGX will fail to load it.
- MBCook 10y agoWe still have the good old DMCA to make sure that anyone who does do that kind of thing could be punished to a ridiculous extent.