3 ms·
> Then you reproduce the build of the open source code and check the hashes match. Assuming that the sgx environment hasn't been tampered with. There have been
by pgeorgi 7y ago
> Then you reproduce the build of the open source code and check the hashes match.
Assuming that the sgx environment hasn't been tampered with. There have been several flaws in sgx, e.g. https://www.theregister.co.uk/2019/02/12/intel_sgx_hacked/ https://www.theregister.co.uk/2019/02/12/intel_sgx_hacked/
- thu2111 7y agoSGX is patchable via microcode updates (and some parts are software). The remote attestation contains the patchlevel of the system, so, a client can tell if you aren't keeping up to date with security patches. And so far these are not zero day bugs. The researchers work with Intel to only publish when there are fixes available, usually. It's not much different to any other security system in that sense.