5 replies
5 recasts
72 reactions
1 reply
0 recast
0 reaction
TEEs should never be the fundamental component of security. They should only be defense in depth. That being said, TEEs directly embedded in the main processor of a computer are unlikely to be secure. On top of microcode updates frequently being able to modify the TEE's functionality, shared caches, shared power draw, timing side channels (either all or some, depending on the implementation) contribute to leakage and exploitation vectors. There is a reason that actual security hardening for things that matter (high value keys, sensitive compartmented information, etc.) goes to extraordinary lengths to airgap things, down to separate, scrubbed power mains, thick concrete walls, separate furniture for devices to rest on, etc. 1 reply
0 recast
5 reactions
0 reply
0 recast
1 reaction
