7 ms·

Many moons ago, I wrote a prototype on Azure's 'confidential computing' VMs that demonstrated how a computer could 'prove' to another that it was running certai

Many moons ago, I wrote a prototype on Azure's 'confidential computing' VMs that demonstrated how a computer could 'prove' to another that it was running certain code using 'attestations.' I thought it was cool as hell, and honestly thought that if such a technology held up you could build many interesting things with it. Potentially, it would have had many use-cases in the DeFi industry, privacy-preserving computations, and so on. Looking a bit deeper though there were signs that placing all your trust in this technology was still a gamble. For example, the 'attestations' I spoke of earlier... were reports that had been signed by Intel's public key. You lose or hack that key and suddenly you can spoof reports. Then there were the hardware exploits which was the nail in the coffin. It's sad really because Intel SGX was some innovative shit. It would have enabled applications that just aren't possible with a conventional computing model. But it was too good to be true, unfortunately.

eightysixfour 5y ago
It is gone now, but IIRC Microsoft was working on a blockchain for inter-enterprise settlement that ran in the secure enclave. It had extremely high throughput and all of the parties could “trust” that the code running was the same, so they were all following the same rules. Neat concept, they killed it before ever sharing source code.
- melchebo 5y ago
  https://techcommunity.microsoft.com/t5/it-transformation/microsoft-s-blockchain-proposition/m-p/193682 https://techcommunity.microsoft.com/t5/it-transformation/mic...
- tome 5y ago
  Are you thinking of https://en.m.wikipedia.org/wiki/Confidential_Consortium_Framework https://en.m.wikipedia.org/wiki/Confidential_Consortium_Fram...? It is alive and the source code is shared.
  - eightysixfour 5y ago
    I am! The “Coco” github from back in the day was killed so I thought it was gone.
- justinclift 5y ago
  > all of the parties could “trust” that the code running was the same Doesn't that trust fall apart when the SGX has known hacks? eg bad actors can do their thing
  - paconbork 5y ago
    Yeah, the Foreshadow attack leaked signing keys, so you could attest to a modified program running outside an enclave. I think other attacks didn't get that far though
  - eightysixfour 5y ago
    Yes, but the environment for it was already more “trusted” than public, it was meant for enterprise blockchain.
- phire 5y ago
  I have seen a deployed altcoin built on SGX. Can't remember the name or if it was even successful. In my opinion, it's a huge risk. With a regular blockchain, the fact that someone might maliciously be running the wrong code is baked into the design, and the security model has to handle it. With SGX, you are relying on Intel's security model to make sure everyone is running the same code. If SGX is ever broken (which it has been, to some extent) and a malicious node is running different code, then your whole security model falls apart and they can start attacking the blockchain. You might argue that you can design the blockchain to be secure even when SGX is broken. But if it's secure enough without SGX, why use SGX? You risk your security model being broken due to a bug and nobody realizing due to SGX protecting it, until SGX stops protecting. Plus, you exclude people who don't have SGX from running your blockchain.
  - paconbork 5y ago
    Are you thinking of Secret Network? If I remember correctly, they use SGX for transaction privacy (transactions are encrypted with a key that is only known to enclaves). An SGX break I think would just make it a generic proof of stake network but maybe the way they ended up doing smart contracts is different?
    - phire 5y ago
      Yeah, I think secret network is the one I'm remembering. It's been a long time since I was paying attention to the cryptocurrency space. My consern is that it hasn't been tested as a generic proof of stake network and there is a risk that it might not degrade as expected. It also means the blockchain can't be independently verified. If someone was to exploit it in a way that gave themselves extra coins, then nobody would ever know because all evidence is hidden inside the secure enclave. How big is the risk? I'm not sure. I just suspect it's bigger than the advantage you get from using SGX; There are other ways to get privacy.
  - espadrine 5y ago
    > I have seen a deployed altcoin built on SGX. That may be MobileCoin[0]. Before that, from the same inspiration, Signal built SVR[1], a recovery system for the address book that uses SGX to ensure the servers cannot decrypt the backup. I wonder how they will react to this deprecation. [0]: https://developers.mobilecoin.com/overview/security/secure-enclave https://developers.mobilecoin.com/overview/security/secure-e... [1]: https://signal.org/blog/secure-value-recovery/#deus-sgx-machina https://signal.org/blog/secure-value-recovery/#deus-sgx-mach...
- mort96 5y ago
  How did that solution do? How did it solve the 51% attack problem without being bundled with a cryptocurrency? ...Or are you just using the word "blockchain" to literally mean a Merkle tree, so that the "innovation" was equivalent to storing settlements in git?
aaaaaaaaata 5y ago
We can just use phones or USB sticks as signing keys, for anything and everything — why does nobody talk about/want/demand this?!
- anamexis 5y ago
  We do it all the time with our phones with Apple Pay/Google Pay.
- grlass 5y ago
  This is used heavily by hardware tokens like Yubikeys, and especially for cryptocurrency people with so called "hardware wallets" like Trezor and Ledger (which can generate many subkeys on the devices). Companies like Google now have employees issues with Yubikeys [1]. [1] https://www.yubico.com/resources/reference-customers/google/ https://www.yubico.com/resources/reference-customers/google/

eightysixfour 5y ago

It is gone now, but IIRC Microsoft was working on a blockchain for inter-enterprise settlement that ran in the secure enclave. It had extremely high throughput and all of the parties could “trust” that the code running was the same, so they were all following the same rules. Neat concept, they killed it before ever sharing source code.

melchebo 5y ago
https://techcommunity.microsoft.com/t5/it-transformation/microsoft-s-blockchain-proposition/m-p/193682 https://techcommunity.microsoft.com/t5/it-transformation/mic...
tome 5y ago
Are you thinking of https://en.m.wikipedia.org/wiki/Confidential_Consortium_Framework https://en.m.wikipedia.org/wiki/Confidential_Consortium_Fram...? It is alive and the source code is shared.
- eightysixfour 5y ago
  I am! The “Coco” github from back in the day was killed so I thought it was gone.
justinclift 5y ago
> all of the parties could “trust” that the code running was the same Doesn't that trust fall apart when the SGX has known hacks? eg bad actors can do their thing
- paconbork 5y ago
  Yeah, the Foreshadow attack leaked signing keys, so you could attest to a modified program running outside an enclave. I think other attacks didn't get that far though
- eightysixfour 5y ago
  Yes, but the environment for it was already more “trusted” than public, it was meant for enterprise blockchain.
phire 5y ago
I have seen a deployed altcoin built on SGX. Can't remember the name or if it was even successful. In my opinion, it's a huge risk. With a regular blockchain, the fact that someone might maliciously be running the wrong code is baked into the design, and the security model has to handle it. With SGX, you are relying on Intel's security model to make sure everyone is running the same code. If SGX is ever broken (which it has been, to some extent) and a malicious node is running different code, then your whole security model falls apart and they can start attacking the blockchain. You might argue that you can design the blockchain to be secure even when SGX is broken. But if it's secure enough without SGX, why use SGX? You risk your security model being broken due to a bug and nobody realizing due to SGX protecting it, until SGX stops protecting. Plus, you exclude people who don't have SGX from running your blockchain.
- paconbork 5y ago
  Are you thinking of Secret Network? If I remember correctly, they use SGX for transaction privacy (transactions are encrypted with a key that is only known to enclaves). An SGX break I think would just make it a generic proof of stake network but maybe the way they ended up doing smart contracts is different?
  - phire 5y ago
    Yeah, I think secret network is the one I'm remembering. It's been a long time since I was paying attention to the cryptocurrency space. My consern is that it hasn't been tested as a generic proof of stake network and there is a risk that it might not degrade as expected. It also means the blockchain can't be independently verified. If someone was to exploit it in a way that gave themselves extra coins, then nobody would ever know because all evidence is hidden inside the secure enclave. How big is the risk? I'm not sure. I just suspect it's bigger than the advantage you get from using SGX; There are other ways to get privacy.
- espadrine 5y ago
  > I have seen a deployed altcoin built on SGX. That may be MobileCoin[0]. Before that, from the same inspiration, Signal built SVR[1], a recovery system for the address book that uses SGX to ensure the servers cannot decrypt the backup. I wonder how they will react to this deprecation. [0]: https://developers.mobilecoin.com/overview/security/secure-enclave https://developers.mobilecoin.com/overview/security/secure-e... [1]: https://signal.org/blog/secure-value-recovery/#deus-sgx-machina https://signal.org/blog/secure-value-recovery/#deus-sgx-mach...
mort96 5y ago
How did that solution do? How did it solve the 51% attack problem without being bundled with a cryptocurrency? ...Or are you just using the word "blockchain" to literally mean a Merkle tree, so that the "innovation" was equivalent to storing settlements in git?

aaaaaaaaata 5y ago

We can just use phones or USB sticks as signing keys, for anything and everything — why does nobody talk about/want/demand this?!

anamexis 5y ago
We do it all the time with our phones with Apple Pay/Google Pay.
grlass 5y ago
This is used heavily by hardware tokens like Yubikeys, and especially for cryptocurrency people with so called "hardware wallets" like Trezor and Ledger (which can generate many subkeys on the devices). Companies like Google now have employees issues with Yubikeys [1]. [1] https://www.yubico.com/resources/reference-customers/google/ https://www.yubico.com/resources/reference-customers/google/