2 ms·
The problem is: Signal already relies on SGX for lots of other features (Signal PINs & Secure Value Recovery, contact discovery etc. etc.) and these depend on S
by codethief 6y ago
The problem is: Signal already relies on SGX for lots of other features (Signal PINs & Secure Value Recovery, contact discovery etc. etc.) and these depend on SGX working as advertized.
- AlexCoventry 6y agoI wasn't aware that Signal relies on SGX. If I want to use Signal without being exposed to risk of SGX compromise, is it still possible?
- codethief 6y agoFor contact discovery, AFAIK no[0]. For everything else: Yes, by setting a randomized long Signal PIN since SGX is effectively used to add entropy to Signal PINs[1]. You can also disable Signal PINs – in this case Signal will simply set a randomized long PIN for you. [0]: https://signal.org/blog/private-contact-discovery/ https://signal.org/blog/private-contact-discovery/ [1]: https://signal.org/blog/secure-value-recovery/ https://signal.org/blog/secure-value-recovery/
- AlexCoventry 6y agoThanks!