Hacker News new | ask | show | jobs
by rdl 4736 days ago
There are tricks you can do with Intel TXT to trust only the CPU and cache (TRESOR is an example) http://www1.informatik.uni-erlangen.de/tresor

It's missing a few elements you'd need to build a really awesome secure cloud, though. (actually, intel hardware was missing it)
1 comments
Nimi 4736 days ago
I only glimpsed it some years ago, but I got the impression that "anything the vendor can do, the attacker can circumvent one level deeper", especially as a criticism of TXT:

http://www.blackhat.com/presentations/bh-dc-09/Wojtczuk_Rutk...

link
rdl 4735 days ago
STM fixed that particular set of problems in 2010/2011. There are still issues with making all of this stuff useful, though.
link