I think Intel knows SGX is a dead end, which is why SGX is being phased out it seems eg Rocket Lake-S late 2020 https://videocardz.com/newz/exclusive-intel-rocket-lake-s-features-pci-express-4-0-xe-graphics …pic.twitter.com/PoUFb3J8Xo
Signal is apparently now playing the "use a weak PIN to protect all your data and trust an enclave to enforce policy" game. With Intel SGX. 
At this point, you might as well use iMessage and am iPhone. Apple knows how to build real enclaves, Intel is a joke.https://twitter.com/qrs/status/1280242272660082688 …
-
-
-
Yes, well, it has been literally ripped open for everyone to read.
End of conversation
New conversation -
-
-
I would rather put my keys in a random ARM Trustzone implementation than in SGX in the cloud
-
TrustZone has maybe 5% of the guarantees SGX has and TrustZone trustlets have also been attacked countless times (also via cache side channels). Still, if you could gift enough comparable ARM servers to Signal I'm sure they'd be happy to use TZ instead ;)
End of conversation
New conversation -
-
-
It's only contact data, and you can unofficially opt out. Moxie confirmed that SGX is only being used as a "rate limiter", and that you can safely set a high strength pin then throw it away
-
With the current implementation, Signal (1) encourages people to set just numbers as PINs (by the name "PIN", default keyboard), and (2) encourages to make them simple (by constantly nagging for them)
End of conversation
New conversation -
-
-
does it not use the iphone enclave if you run signal on an iphone
-
It's used on the server, not the client.
- Show replies
New conversation -
-
-
Apple hasn't made enclaves that could be used server-side though..or ones with even remotely comparable functionality
-
AIUI they actually used third-party HSMs when they needed to build something like this, but I wouldn't be surprised if these days they switched to Apple Silicon macs.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.