Intel SGX Enclaves Support For Linux Sent Out For A 29th Time

[phoronix]

Phoronix: Intel SGX Enclaves Support For Linux Sent Out For A 29th Time

Going on since 2016 has been the long-running effort getting the Software Guard Extensions (SGX) support into the mainline Linux kernel. Sent out this week was the SGX foundation patches for the twenty-ninth time as it works to get into shape for upstream acceptance...

http://www.phoronix.com/scan.php?page=news_item&px=Intel-SGX-Foundations-29-Linux

[milkylainen]

They sure took the "If at first you don't succeed. Try, try, try again" to the extreme.
I'm not sure Hicksons idea was that the 29:th time's a charm tough.

[tildearrow]

Please stop already... After the LVI thing, what's the point of this anymore...


2050: "Intel SGX Enclaves Support For Linux Sent Out For A 200th Time"

[stormcrow]

Intel's SGX issues tends to lend considerable weight to IBM's assertion many years ago that trusted enclaves like TPM, SGX, TrustZone, etc won't stand up to anyone sufficiently motivated and have physical access to the hardware - or even remote access if they are highly skilled and well funded eg: Spectre.

Not to say we shouldn't try to make computing secure (as possible), only that we should never assume some technology will make systems so secure they can't be broken (like the drek DRM maximalists push.)

[Spacefish]

Weil there are some things that stand up to the task. Like smartcards or the tpm modules. Sure the processes around them where broken and there where issues with weak keys, but the core system is that simple ( verifying a signature or signing something ) that it is extremely unlikely to be broken..

[M@yeulC]

I'm fine with it, as long as I can configure it to not hide memory and such from me. I should always be in complete control of all the software that runs on my computer. At least, let me pretend it's here...