Hacker News new | ask | show | jobs
by ivegotnoaccount 1399 days ago
But then, all usages of SGX, not only DRM, would be compromised easily.

I don't know, for instance, if password wallets use it for protecting their data when they are loaded, but that would lead to pretty bad consequences.

1 comments

I'm pretty sure that no password wallets, or any other legitimate security, relies on SGX.
These usually relies on TPM. Which is always designed as 'no private key can be extracted physically'.

If your hardware enhanced wallet relies on SGX, It sounds it is defected as it shouldn't be readable after first write at first place.

And why did you think you need signing key for SGX to extract info from it? You only need the decrypt key (Which is already been pwned). Lack of signing key only prevent you from running random program in SGX but not decrypt existing one.