Re:Thoughts on Intel's upcoming Software Guard Extensions (P...
by sweis on Sunday September 08, 2013 @09:05PM
(#6351295)
SGX is a very interesting development. I agree with Johanna Rutkowska that "SGX might profoundly change the architecture of the future operating systems".
It's also very powerful to be able to attest secure enclaves with a root of trust within the CPU, rather than a TPM. It removes TPMs and the LPC bus as an attestation attack vector.
Enhanced Privacy IDs are particularly interesting, since it will allow you to anonymously or pseudonymously authenticate a particular CPU: http://csrc.nist.gov/groups/ST/PEC2011/presentations2011/bri...
It's also very powerful to be able to attest secure enclaves with a root of trust within the CPU, rather than a TPM. It removes TPMs and the LPC bus as an attestation attack vector.