News for hackers. Stuff that matters.
Re:Asylo: an open-source framework for confidential computing by tptacek on Thursday May 03, 2018 @05:02PM (#16989941)
Within 10 years every mainstream computing hardware environment will have some kind of TEE. They already exist on the iPhone (the SEP), Google's Android phones (the ARM TEE), upcoming high-end ARM processors in general (I think they were calling it "CryptoIsland"?), high-end Intel processors (SGX) and high-end AMD processors (SEV).

The whole point of Asylo is to provide a hardware abstraction layer to make applications portable across different enclaves; it's the opposite of reinforcing Intel's position.

Re:Asylo: an open-source framework for confidential computing by annasapek on Thursday May 03, 2018 @07:00PM (#16990800)
Disclaimer: I am from the Asylo team.

That’s exactly the level of abstraction that we’re looking to provide in Asylo. The parent post linked to the asylo/identity/sgx directory, which contains SGX-specific implementations of some of our higher-level identity abstractions [1]. For instance, “EnclaveAssertionGenerator” defines an interface for generating attestations bound to an enclave’s identity, and “sgx::LocalAssertionGenerator” (an internal construct to our framework) provides that functionality for SGX.

[1] https://github.com/google/asylo/tree/master/asylo/identity

Re:Asylo: an open-source framework for confidential computing by userbinator on Thursday May 03, 2018 @11:55PM (#16992070)
The whole point of Asylo is to provide a hardware abstraction layer to make applications portable across different enclaves; it's the opposite of reinforcing Intel's position.

My main concern is not "reinforcing Intel's position" --- it could just as well be AMD, or ARM, or any other relatively tiny group of hardware manufacturers; the point is that everyone else is giving up and handing the ultimate control over their computing devices and the software they run to a small group, and that is most doubleplus ungood.

Re:Asylo: an open-source framework for confidential computing by Confiks on Thursday May 03, 2018 @06:08PM (#16990446)
> The whole point of Asylo is to provide a hardware abstraction layer to make applications portable across different enclaves; it's the opposite of reinforcing Intel's position.

Yes, I shouldn't have conflated Asylo and SGX (or TEEs in general – where SGX is now dominant for the remote attestation model). The concern was with SGX, maybe even specifically to it being used together with other TEEs for ubiquitous DRM on consumer devices. Asylo could indeed drive competition in the case of remote attestation.

Re:Asylo: an open-source framework for confidential computing by jjoergensen on Thursday May 03, 2018 @06:17PM (#16990515)
Would I need a commercial Intel license to use it for Intel SGX? I ask because they don't seem to hand out the licenses to everyone. https://software.intel.com/en-us/sgx/commercial-use-license-... https://software.intel.com/en-us/forums/intel-software-guard...