[HN Gopher] Technology Deep Dive: Building a Faster ORAM Layer f...
       ___________________________________________________________________
        
       Technology Deep Dive: Building a Faster ORAM Layer for Enclaves
        
       Author : maksim-m
       Score  : 22 points
       Date   : 2022-08-19 16:16 UTC (6 hours ago)
        
 (HTM) web link (signal.org)
 (TXT) w3m dump (signal.org)
        
       | Dunedan wrote:
       | > The enclave solution we use currently on our cloud servers is a
       | technology called SGX built into Intel server processors. Intel's
       | SGX protects against introspection by encrypting RAM as it's
       | written into memory and decrypting it as it's read out. Keys
       | associated with this encryption never leave the underlying CPU,
       | so they're not accessible to the server owners or anyone else
       | with access to server infrastructure. Someone with access to read
       | the memory space of the program could not access the data because
       | it's encrypted, and they don't have the keys to decrypt it. And
       | in Signal's case, we don't have these keys either.
       | 
       | Reading this it seems Signal still relies on SGX not being as
       | broken and insecure as it is. I find that quite disappointing to
       | be honest.
        
         | password4321 wrote:
         | Signal seems to do quite a bit of marketing by omission:
         | "Intel's SGX protects against introspection", "we depend on
         | donations from our community", etc.
         | 
         | Perhaps they should be encouraged to flesh out the details a
         | bit more in footnotes or something.
        
       ___________________________________________________________________
       (page generated 2022-08-19 23:02 UTC)