Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Don't let TEEs break your MPC

blog.trailofbits.com | blog | #cryptography | #tee | #trusted-execution-environment | #key-management | #threshold-signatures | #attestation | #mpc | #rollback-attack

Summary

Combining threshold signatures with trusted execution environments (TEEs) can strengthen MPC deployments, if the TEE serves as a defense-in-depth layer rather than a substitute for a sound protocol.
Published
Collected

original ↗

Related coverage

blog · blog.trailofbits.com
A few notes on AWS Nitro Enclaves: Images and attestation
Trail of Bits digs into AWS Nitro Enclaves EIF images and attestation, mapping implicit trust relationships and sharing recommendations to avoid security footguns in enclave builds.
blog · blog.trailofbits.com
What we learned about TEE security from auditing WhatsApp's Private Inference
Audit of WhatsApp's Private Inference found 28 issues, 8 high-severity, that could bypass its privacy guarantees — proving TEEs are no silver bullet for combining encryption with AI features.
vulnerability · blog.trailofbits.com
Breaking the shared key in threshold signature schemes
Trail of Bits discloses a DoS flaw in Pedersen DKG of threshold signature schemes (Frost, DMZ21, GG20, GG18): a malicious participant can silently raise the shared-key reconstruction threshold.
vulnerability · blog.trailofbits.com
Don’t overextend your Oblivious Transfer
Trail of Bits found that selective abort attacks in the OT extension subprotocol can let a malicious threshold ECDSA participant recover other parties' secrets and ultimately the signing key.
research · blog.quarkslab.com
Overview of Intel SGX - Part 1, SGX Internals
Part 1 of the Intel SGX series: the processor and memory extensions supporting SGX, enclave management and life cycle, plus the secret sealing and attestation features.
blog · blog.trailofbits.com
Auditing in the age of (good enough) AI
Trail of Bits explains how agents built tooling and a Lean model for the Miden zkVM audit, finding a flaw enabling Falcon signature forgery and yielding 95 machine-checked proofs.
back