3 ms·
SGX enclaves can attest to the code they are running, so you don't exactly need to take Signal's word on faith.
by madars 6y ago
SGX enclaves can attest to the code they are running, so you don't exactly need to take Signal's word on faith.
- eptcyka 6y agoExcept SGX enclaves are horribly broken.
- monocasa 6y agoLike, does an SGX enclave attest that meltdown is patched in microcode? That's one way to pull the keys out. The recentish work to get read write access to some Intel CPU's microcode can probably break SGX too. I wouldn't be surprised if the ME code execution flaws could be used that way too.
- Someone1234 6y agoThat isn't a solution to the problem being discussed (a provider's server code being verifiable by end users). I'm quite confused by the suggestion that it could be/is.