Re:Signal adds a payments feature with a privacy-focused cry...
by codethief on Tuesday April 06, 2021 @05:18PM
(#26717516)
The problem is: Signal already relies on SGX for lots of other features (Signal PINs & Secure Value Recovery, contact discovery etc. etc.) and these depend on SGX working as advertized.
[ Parent
| on HN ]
Re:Signal adds a payments feature with a privacy-focused cry...
by AlexCoventry on Wednesday April 07, 2021 @01:02AM
(#26720777)
I wasn't aware that Signal relies on SGX. If I want to use Signal without being exposed to risk of SGX compromise, is it still possible?
Re:Signal adds a payments feature with a privacy-focused cry...
by codethief on Wednesday April 07, 2021 @04:21AM
(#26721810)
For contact discovery, AFAIK no[0].
For everything else: Yes, by setting a randomized long Signal PIN since SGX is effectively used to add entropy to Signal PINs[1]. You can also disable Signal PINs – in this case Signal will simply set a randomized long PIN for you.
Re:Signal adds a payments feature with a privacy-focused cry...
by AlexCoventry on Wednesday April 07, 2021 @10:47AM
(#26725713)
Thanks!