Intel SGX Patch For GCC - Software Guard Extensions

[phoronix]

Phoronix: Intel SGX Patch For GCC - Software Guard Extensions

Intel's Software Guard Extensions (SGX) has been supported since the launch of Skylake CPUs while finally support for it is being added to the GCC compiler...

http://www.phoronix.com/scan.php?page=news_item&px=Intel-SGX-GCC-Patch

[OlafLostViking]

What is the approach to prevent a hypervisor or a binary instrumentation tool to simply lie about the support for SGX/circumvent the hardware?

[Staffan]

Can malware hide itself in these sections? Aren't they playing with fire here?

[carewolf]

What is the approach to prevent a hypervisor or a binary instrumentation tool to simply lie about the support for SGX/circumvent the hardware?

Nothing I believe. It only works if you trust the "hardware", if the hardware is emulated you are kind of fucked. Personally I consider SGX mostly a protection against trojans and hackers, and of course another DRM component. It can protect your keys and passwords from an infection even a rootkit, and it can protect DRM decoded content from being copied between being decrypted and decoded.