PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Overview of Intel SGX - Part 2, SGX Externals

blog.quarkslab.com | research | #reverse-engineering | #tee | #security | #enclave | #intel-sgx | #sgx-sdk
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Part 2 of the SGX series: how applications interact with enclaves (ECALLs, OCALLs, asynchronous exits), the software shipped in the SDK and PSW, and known attacks and concerns.
Published
Collected

Related coverage

research · blog.quarkslab.com
Overview of Intel SGX - Part 1, SGX Internals
Part 1 of the Intel SGX series: the processor and memory extensions supporting SGX, enclave management and life cycle, plus the secret sealing and attestation features.
research · blog.quarkslab.com
Security audit of Mithril Security BlindAI
Quarkslab's audit of Mithril Security's BlindAI (now BlindAI Core): an open-source Intel SGX-based confidential computing solution for private AI inference, reviewed against a threat model.
research · eshard.com
Discover esReven's knowledge modules for Reverse Engineering
Explore the world of reverse-engineering and master advanced techniques with esReven's new knowledge modules.
research · eshard.com
esReven 2023.04 is out!
esReven 2023.10 is here! Explore powerful updates including a new Python API for user-defined types, PDB file uploads, and binary mapping. Level up your reverse engineering with enhanced malware analysis use cases and integrated network activity tools.
blog · blog.trailofbits.com
A trail of flipping bits
Trail of Bits shows how an AES-GCM forbidden attack can flip bits in Shamir-split private key shards, iteratively recovering an ECDSA key protected by a trusted execution environment.
research · blog.quarkslab.com
A Deep Dive Into Samsung's TrustZone (Part 3)
Part three of the Samsung TrustZone series: the vulnerabilities found in Secure World components (Kinibi trustlets) and how they were exploited to reach code execution in EL3 on Galaxy devices.
Back