Re:Adobe Spyware Reveals Again the Price of DRM: Your Privac...
by nitrogen on Wednesday October 08, 2014 @02:32AM
(#8425555)
How often is the enclave validated? Could modified DRAM be used that would return one set of data to the enclave validation, and another the rest of the time? What would have to be done to the CPU cache?
[ Parent
| on HN ]
Re:Adobe Spyware Reveals Again the Price of DRM: Your Privac...
by walterbell on Wednesday October 08, 2014 @02:50AM
(#8425582)
More data here:
http://theinvisiblethings.blogspot.com/2013/08/thoughts-on-i...
http://theinvisiblethings.blogspot.com/2013/09/thoughts-on-i...
".. the processor automatically encrypts the content of SGX-protected memory pages whenever it leaves the processor caches and is stored in DRAM. In other words the code and data used by SGX enclaves never leave the processor in plaintext."
"..once the key is obtained, it is available only within the SGX enclave. It cannot be found in DRAM or on the memory bus, even if the user had access to expensive DRAM emulators or bus sniffers. And the key cannot also be mishandled by the code that runs in the SGX enclave, because remote attestation also proved that the loader code has not been modified.."