Intel and AMD trusted enclaves, the backbone of network security, fall to physical attacks

Intel calls its protection SGX, and AMD has named it SEV-SNP. Over the years, researchers have repeatedly broken the security and privacy promises that Intel and AMD have made about their respective protections. On Tuesday, researchers independently published two papers laying out separate attacks that further demonstrate the limitations of SGX and SEV-SNP. A separate attack known as Wiretap is able to passively decrypt sensitive data protected by SGX and remain invisible at all times. In SGX and SEV-SNP, that means the same plaintext written to the same memory address always produces the same ciphertext.