3 ms·
"trusted execution environment" != end-to-end encryption The entire point of E2EE is that both "ends" need to be fully under your control.
by paxys 10mo ago
"trusted execution environment" != end-to-end encryption
The entire point of E2EE is that both "ends" need to be fully under your control.
- Stefan-H 10mo agoThe point of E2EE is that only the people/systems that need access to the data are able to do so. If the message is encrypted on the user's device and then is only decrypted in the TEE where the data is needed in order to process the request, and only lives there ephemerally, then in what way is it not end-to-end encrypted?
- paxys 10mo agoBecause anyone with access to the TEE also has access to the data. The owners can say they won't tamper with it, but those are promises, not guarantees.
- Stefan-H 10mo agoThat is where the attestation comes in to show that the environment is only running cryptographically verified versions of open source software that does not have the mechanisms to allow tampering.
- habinero 10mo agoThat's insufficient. Code signing doesn't do anything against theft or malfeasance by internal actors. Or external ones, I suppose. If the software can modify data legitimately, it can be tampered with.
- Stefan-H 10mo agoThe point of measured environments like the TEE is that you are able to make guarantees about all the software that is running in the environment (verified with the attestation). "If the software can modify data legitimately, it can be tampered with." - the software that makes up the SBOM for these environments do not expose administrator functions to access the decrypted data.
- optymizer 10mo agoThis is false. From Wikipedia: "End-to-end encryption (E2EE) is a method of implementing a secure communication system where only the sender and intended recipient can read the messages." Both ends do not need to be under your control for E2EE.