3 ms·
Not sure what you mean? The point of storing SSH keys in the Secure Enclave is to prevent against the default of /literally any/ program from reading them in p
by yunohn 4y ago
Not sure what you mean?
The point of storing SSH keys in the Secure Enclave is to prevent against the default of /literally any/ program from reading them in plain text off your file system.
- wslh 4y agoI mean [1] and [2]. General computation devices have wide attack vectors than specific security devices. [1] An Overview of Vulnerabilities and Mitigations of Intel SGX Applications: https://cyber.ee/uploads/D_2_116_An_Overview_of_Vulnerabilities_and_Mitigations_of_Intel_SGX_Applications_c1282b1505.pdf https://cyber.ee/uploads/D_2_116_An_Overview_of_Vulnerabilit... [2] https://www.google.com/search?q=security+enclave+vulnerabilities+site%3Areddit.com&rlz=1C5CHFA_enAR1036AR1039&sxsrf=AJOqlzVm6qqJOKevyhM5xhpRE6quMWwI5A%3A1678445436228&ei=fAsLZIzQDZ7D5OUPsaS32Ac&ved=0ahUKEwiM_oDAmNH9AhWeIbkGHTHSDXsQ4dUDCA8&uact=5&oq=security+enclave+vulnerabilities+site%3Areddit.com&gs_lcp=Cgxnd3Mtd2l6LXNlcnAQA0oECEEYAVDiBFi4C2CwDWgBcAB4AIABV4gB9gGSAQE0mAEAoAEBwAEB&sclient=gws-wiz-serp https://www.google.com/search?q=security+enclave+vulnerabili...
- yunohn 4y agoSure, nobody said there can’t be vulnerabilities in the Secure Enclave or similar options. The default alternative is globally-readable plain text. Don’t let perfection be the enemy of good/better.
- wslh 4y ago> Don’t let perfection be the enemy of good/better. I agree, it is just that we add a new element of security which has other security issues while we can move directly outside the computer. Apple move to U2F as a 2FA is a clear execution.