3 ms·
I wasn't aware that Signal relies on SGX. If I want to use Signal without being exposed to risk of SGX compromise, is it still possible?
by AlexCoventry 6y ago
I wasn't aware that Signal relies on SGX. If I want to use Signal without being exposed to risk of SGX compromise, is it still possible?
- codethief 6y agoFor contact discovery, AFAIK no[0]. For everything else: Yes, by setting a randomized long Signal PIN since SGX is effectively used to add entropy to Signal PINs[1]. You can also disable Signal PINs – in this case Signal will simply set a randomized long PIN for you. [0]: https://signal.org/blog/private-contact-discovery/ https://signal.org/blog/private-contact-discovery/ [1]: https://signal.org/blog/secure-value-recovery/ https://signal.org/blog/secure-value-recovery/
- AlexCoventry 6y agoThanks!