Compromising Signal's Contact Discovery Enclave (SGX)
v12.sh
1 thread
SGX has NEVER been secure... trusted execution can only come from open design chips like RiskV paired with an HSM. Intel has too many reasons to give intel to the NSA... They technically are 10% owners under America's deal, I mean dear leader.
Is this or any other SGX exploit a consequence of Intel processors not being open source?
At least the open alternatives can be fuzzed, intel minix and intel ME are other examples of NSA exploitware
I might add (although it's getting off topic) that a centralised service, by definition brokering every single user's comms and metadata is NEVER private. The whole premise of Signal as a secure/private solution always seemed silly, the SGX indirection is theater.