PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Themes from Real World Crypto 2022

blog.trailofbits.com | blog | #conference | #cryptography | #tee | #side-channels | #real-world-crypto | #trusted-hardware
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Themes from Real World Crypto 2022 in Amsterdam: flaws in trusted hardware and TEEs, hard-to-use security tooling, pervasive side channels, and protocol confusion in cryptographic systems.
Published
Collected

Related coverage

blog · blog.trailofbits.com
Themes from Real World Crypto 2020
Trail of Bits recaps Real World Crypto 2020, where 642 attendees explored themes from pervasive crypto bugs and the cryptographer shortage to new uses like Apple's Find My key derivation.
blog · blog.trailofbits.com
Don't let TEEs break your MPC
Combining threshold signatures with trusted execution environments (TEEs) can strengthen MPC deployments, if the TEE serves as a defense-in-depth layer rather than a substitute for a sound protocol.
blog · blog.trailofbits.com
What we learned about TEE security from auditing WhatsApp's Private Inference
Audit of WhatsApp's Private Inference found 28 issues, 8 high-severity, that could bypass its privacy guarantees — proving TEEs are no silver bullet for combining encryption with AI features.
blog · blog.trailofbits.com
Vulnerabilities in LUKS2 disk encryption for confidential VMs
New LUKS2 flaws (CVE-2025-59054, CVE-2025-58356) affect eight confidential VM systems: malleable headers let disk-level attackers trick TEE guests into encrypting secrets with a null cipher.
blog · blog.trailofbits.com
A few notes on AWS Nitro Enclaves: Images and attestation
Trail of Bits digs into AWS Nitro Enclaves EIF images and attestation, mapping implicit trust relationships and sharing recommendations to avoid security footguns in enclave builds.
blog · blog.trailofbits.com
Chaos Communication Congress (37C3) recap
Trail of Bits engineers recap 37C3 in Hamburg, covering their Pwndbg and Pwntools sessions and highlighting talks on fuzzing, side channels, reverse-engineering Rust, and proprietary cryptography.
Back