2 ms·
> You can't cryptographically verify that the system you are using doesn't have backdoors Yes you can, there are many methods including but not limited to SGX
by rasengan 6y ago
> You can't cryptographically verify that the system you are using doesn't have backdoors
Yes you can, there are many methods including but not limited to SGX among other things.
- incrudible 6y agoSGX has critical flaws that may or may not have been put there intentionally. How do you "cryptographically verify" that such vulnerabilities do not exist?
- rasengan 6y agoTo be able to exploit these "critical flaws" in SGX is quite difficult in the real world. That said, I agree that it could happen in extraordinary circumstances. If you fall under these extraordinary circumstances, you really shouldn't being using a computer identifiable to you in any serious kind of way nor connecting to anything you had ever historically connected to.
- incrudible 6y agoIt's not about me, it's about government infrastructure. How do you procure a system that you don't have to trust, where you can rely on cryptography alone? It's simply not possible. It's not just about CPUs, but all the hardware that goes into running a network.