4 ms·
It's a not-fail in the sense that it's working as designed, but there is certainly a failure somewhere - perhaps on the branding/marketing level, since there ar
by Retr0id 6mo ago
It's a not-fail in the sense that it's working as designed, but there is certainly a failure somewhere - perhaps on the branding/marketing level, since there are multiple products called "SGX" with substantially different security properties, and not everyone got the memo about the changes.
If a product advertises using SGX to achieve some security property, I have no way of knowing which SGX they're talking about (and maybe they don't know, either).
FWIW I am fairly sceptical of both ZKP and confidential computing. With CC it seems like an ongoing attacker/defender arms race, whereas my confidence in the more "boring", battle-tested ZKP constructions only grows with time.
I think both can be used to improve the security of a system, but ideally as more of a defense-in-depth measure than as something load bearing.
- mike_hearn 6mo agoAgree that changing the threat model whilst keeping the same brand name is confusing.