Hacker News new | past | comments | ask | show | jobs | submit login

it's used quite a bit in finance for things like transaction signing. the keys used to create signatures only ever exist within the SGX enclave, similar to how yubikeys and HSMs do the same thing.

compromising SGX wouldn't suddenly open up all of these transactions to exploitation though, since the attacker would need (presumably root) access to the machine and the keys could always be rolled.

I'm no expert but I suspect it would mean urgent firmware updates for anyone relying on SGX




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: