3 ms·

Couldn't the keys be loaded once, in private write-only flash memory, by the user of the chip?

• tromp 11mo ago
  The intended use case is for remote execution where the user (data owner) pays a service provider to run services on their hardware. It could still work if the user somehow prepares the chip herself and ships it to the service provider to be used on their future data, but most users would not want to bother with that first step.
• todd_austin 11mo ago
  I created Mojo-V. IMHO, the service provider is the last one that should ever be able to see the keys :-). It's them we want to keep sensitive data away from Keys are injected into the HW with public-key encryption. This requires that the HW have keys that only the HW knows (it's secret key). This key is made by a weak PUF circuit, which is basically a circuit that measures silicon process variation. So the keys are born in the silicon fab, through the natural variability of the silicon fabrication process. I didn't invent this, it is an old idea. Intel SGX uses the same approach.