3 ms·
No, because that way a rogue kernel could overwrite the exclave itself and the next reboot would be insecure. You can’t trust a low-trust environment to update
by brookst 2y ago
No, because that way a rogue kernel could overwrite the exclave itself and the next reboot would be insecure. You can’t trust a low-trust environment to update a high-trust environment.
- MBCook 2y agoIs that why everything is cryptographically secured in the boot chain? To ensure only trusted code is loaded?
- kennysoona 2y agoExactly.