3 ms·
AMD SEV has the same problem, with an even larger attack surface. But - at least it's compatible with the rest of the world, since it runs ordinary VMs, and can
by lima 7y ago
AMD SEV has the same problem, with an even larger attack surface. But - at least it's compatible with the rest of the world, since it runs ordinary VMs, and can be used as a drop-in defense-in-depth measure.
Intel SGX, on the other hand, is a severely constrained alien environment and porting stuff to run in SGX is a massive undertaking, requiring special compilers and SDKs. The cost-benefit calculation does not add up, given that it does not provide the level of security it claims to have.
I wouldn't be surprised if SEV will eventually be adopted as the industry standard, while SGX disappears into irrelevance.