Side-channel attacks mitigations on SGX

Intel® Software Guard Extensions (Intel® SGX)

Discussion board focused on hardware-based isolation and memory encryption to provide extended code protection in solutions.

Side-channel attacks mitigations on SGX

355 Views

Hi,

To my knowledge threat model of SGX states that " they do not protect against side channel attack and have excluded such attacks in their threat model". I am aware that ForeShadow is one of the latest if not the latest practical attack performed over SGX. They have demonstrated this attack to Intel and Intel responsible guys have promised to defend against such attack in the new release version of SGX.

Now my question is: Does anyone now the current state of SGX threat model? Does SGX now protect against side channel attack and in particular against ForeShadow attack? If yes, can anyone explain to me or forward me to some sources, the line of defense SGX authors have taken to protect against such attacks.

Cheers,

Enio

Link Copied

0 Replies

Community support is provided during standard business hours (Monday to Friday 7AM - 5PM PST). Other contact methods are available here.

Intel does not verify all solutions, including but not limited to any file transfers that may appear in this community. Accordingly, Intel disclaims all express and implied warranties, including without limitation, the implied warranties of merchantability, fitness for a particular purpose, and non-infringement, as well as any warranty arising from course of performance, course of dealing, or usage in trade.

For more complete information about compiler optimizations, see our Optimization Notice.