Live data from Hacker News

Intel deprecates SGX on Core series processors

edc.intel.com

1–10 of 138 posts

Re: Intel deprecates SGX on Core series processors

#7

Good riddance. (For those unaware, basically the only use-case of SGX was hardware-enforced DRM.)

On consumer CPUs DRM may have been the only use case, and indeed good riddance. But on the server side it's possible for tenants to use these hardware features to run workloads that the hosts verifiably cannot modify or inspect. In other words, this lets you use AWS/GCP/Azure etc. while keeping both your data and your code competely opaque to Amazon/Google/Microsoft etc. Disclaimer: my job is to write the software that makes this possible, and all our code is open-source and housed under the Linux Foundation's Confidental Computing Consortium: https://enarx.dev/ .

Re: Intel deprecates SGX on Core series processors

#8

They claim SGX support on Xeon is still “full steam ahead” https://community.intel.com/t5/Blogs/Products-and-Solutions/...

Specifically the next generation of SGX is pushing ahead, since a number of flaws were identified in the original design.

Re: Intel deprecates SGX on Core series processors

#10
post #6

Good riddance. (For those unaware, basically the only use-case of SGX was hardware-enforced DRM.)

I thought you could use it for HSM-type workloads too

Like a third party’s HSM running locally on your computer, heh
Post reply on HN