undefined | Better HN

0 pointshayley-patton3y ago0 comments

Thanks. How can the network tell that it is definitely communicating with a secure enclave, and not some kind of emulator? [1] suggests that keys and signatures from Intel are burnt into CPUs, which would work. All in all it's certainly an odd thing to put trust in.

[1] https://news.ycombinator.com/item?id=21840086

0 comments

throw_a_grenade3y ago

Yes, the keys are kept in CPU itself. AFAIK Intel doesn't disclose the exact mechanism (blown fuses, EPROM or something entirely different).

You can't get valid quote outside the enclave, because CPU doesn't provide the instruction to sign the quote outside the enclave, and you can't calculate it youself, because you don't know CPU's private key.

j / k navigate · click thread line to collapse

0 pointshayley-patton3y ago0 comments

[1] https://news.ycombinator.com/item?id=21840086

0 comments

throw_a_grenade3y ago

Yes, the keys are kept in CPU itself. AFAIK Intel doesn't disclose the exact mechanism (blown fuses, EPROM or something entirely different).

j / k navigate · click thread line to collapse