3 ms·
Theoretically, SGX allows you to assume that your data is in danger only if Intel and your service provider are cooperating in order to access it. SGX has had v
by ajconway 7y ago
Theoretically, SGX allows you to assume that your data is in danger only if Intel and your service provider are cooperating in order to access it.
SGX has had vulnerabilities before, and there are likely to be more, but it still seems like a sane way to secure your customer’s data.
- joepie91_ 7y agoIt doesn't allow you to assume that at all, precisely because of the potential for vulnerabilities. SGX is just yet another iteration of the 'trusted tamper-proof hardware' concept (which, for reasons that are unclear to me, is apparently magically fine when Intel does it but impossible and bound to be broken when somebody else does it), and it suffers from the exact same issues as every 'trusted hardware' scheme before it.