Intel SGX Driver Updated But Likely Too Late For Linux 4.15

[phoronix]

Phoronix: Intel SGX Driver Updated But Likely Too Late For Linux 4.15

Not to be confused with PowerVR SGX, the Intel SGX driver was revised with new patches published today but it doesn't look like it will land for Linux 4.15...

http://www.phoronix.com/scan.php?page=news_item&px=Intel-SGX-Driver-V6

[tildearrow]

"scenarions" -> "scenarios"

[Zan Lynx]

If the host was really malicious it would dynamically intercept and patch the code before execution so it only thought it had set up a secure enclave.

[timofonic]

If the host was really malicious it would dynamically intercept and patch the code before execution so it only thought it had set up a secure enclave.

Would it be useful for reverse engineering?

My opnion: Another toxic crap like TPM, ME and others...

[starshipeleven]

If the host was really malicious it would dynamically intercept and patch the code before execution so it only thought it had set up a secure enclave.

That's harder than it sounds like.

[tga.d]

If the host was really malicious it would dynamically intercept and patch the code before execution so it only thought it had set up a secure enclave.

The host can't touch the memory the enclave uses, and code being run is signed. Without the secret key, you can't fool anyone.

EDIT: Not to imply that SGX is perfectly secure. We know it's not (side channels being the biggest problem, and vulnerabilities in these drivers have been found). But the attack you describe doesn't work.