Intel SGX: Not So Safe After All, ÆPIC Leak

2 years ago thenewstack.io

Summary: This is a summary of an article originally published by The New Stack. Read the full original article here →

https://www.intel.com/content/www/us/en/developer/tools/software-guard-extensions/overview.html memory encryption technology sounded like such a good idea back in 2015. This set of security instructions would enable programmers to set up protected private memory regions, called enclaves.

Oh well, it was a nice idea while it lasted.

An attacker can target data in use, such as register values and memory loads, and data at rest, e.g., SGX-enclave data pages.

While its Common Vulnerability Scoring System (CVSS) score is only 6.0, for people that rely on SGX for security, it’s much nastier.

DevOps Articles