5 ms·
> SGX is disabled by default, it has to be enabled for this exploit to be relevant This is an attack on SGX. If you are not using it, it is irrelevant regardle
by xucheng 7y ago
> SGX is disabled by default, it has to be enabled for this exploit to be relevant
This is an attack on SGX. If you are not using it, it is irrelevant regardless of whether it is enabled.
> POC requires privileged execution, at which point you can safely assume all is already lost
For SGX, this is different. The threat model behind SGX is that anything outside SGX (including OS, BIOS, motherboard, etc.) is untrusted. The whole motivation behind SGX is to create a trusted environment in an untrusted host.