Comment

Comment by aiisjustanif

I mean it's proprietary, but we understand the architecture well enough and have high degree of trust for a reason. Trusted execution environments have been around for years with really good results from a security and privacy perspective. Apple enclaves have been around over a decade and exclave 2 years now [1]. If security researchers find that backdoors exists and not just an exploit, it's in Apple's best interest to fix it based on bad PR alone.

AWS enclaves [2] have been around for a few years now with decent research on the topic and they are highly secure from personal experience and pentesting [3]. The idea at least is similar for exclaves, instead of a separate VM or a completely detached coprocessor chip, Exclaves create isolated resources on the main system-on-chip.

[1]: https://randomaugustine.medium.com/on-apple-exclaves-d683a2c... [2]: https://aws.amazon.com/ec2/nitro/nitro-enclaves/ [3]: https://arxiv.org/pdf/2206.04123

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton