3 ms·
After many side channel attacks on SGX Intel revealing fundamental design flaws, SGX is absent in recent Intel processors. Centralized services like Signal sti
by lrvick 4y ago
After many side channel attacks on SGX Intel revealing fundamental design flaws, SGX is absent in recent Intel processors.
Centralized services like Signal still pinky swear they will not use any of these exploits and break all the metadata promises they built on SGX. Even if the US government asks them nicely.
Any security built on SGX is security theater.
- krastanov 4y agoI always assumed that SGX's use by Signal is just "cute" and "nice to have" and "defense in depth", not anything on which the security of my communication actually depends. Am I mistaken?
- anonymousDan 4y agoYou misrepresent. SGX is still very much alive on datacenter CPUs (with secure cloud computing the main application area).
- lrvick 4y agoTIL they dropped it for everything but Xeon. More reasons to avoid Xeon :-P https://community.intel.com/t5/Blogs/Products-and-Solutions/Security/Rising-to-the-Challenge-Data-Security-with-Intel-Confidential/post/1353141 https://community.intel.com/t5/Blogs/Products-and-Solutions/...
- fomine3 4y agoWould you think same for Apple Secure Enclave or ARM TrustZone?
- frozenport 4y agoHow does SGX work on non-Intel Android?
- duskwuff 4y agoIt doesn't. Signal uses it on the server side.