5 ms·
No, that's all fine for mucking around and developing apps, but actual SGX needs attestation which the emulator can't fake. That's the whole point of SGX.
by bubblethink 10y ago
No, that's all fine for mucking around and developing apps, but actual SGX needs attestation which the emulator can't fake. That's the whole point of SGX.
- flukus 10y agoBut how does that remain a secret when the browser can MitM everything between the CPU and the web?
- bubblethink 10y agoThere is a hardware-based secret which emulators cannot obtain or fake. That breaks the attestation chain. At the heart of it, there is some stuff that only your processor can do and not you the user even though you may have full control over the operating system. The OS is in SGX's threat model.