ARM CCA Realms as a TEE Model for Mobile and Edge AI
Arm's new security model lets phones run full AI models safely in isolated environments.
Preston Nardone
Section
Trusted Execution Environments (TEEs) and Secure Enclaves
8 stories in Trusted Execution Environments (TEEs) and Secure Enclaves.
AWS Nitro Enclaves for Sensitive Data Processing
AWS isolates sensitive data processing below the operating system.
Anouk Mercer
Confidential Containers with Kata Containers and TEE Backends
Kata Containers protects workloads from the infrastructure itself using hardware-encrypted memory.
Lorena Sundqvist
Intel SGX Enclave Development with the Open Enclave SDK
Hardware isolation alone won't protect your secrets without careful boundary design.
Anouk Mercer
TEE TCB Updates and Patch Management in Production
Patching confidential computing requires tearing down running enclaves to update attestation claims.
Anouk Mercer
Sealing and Secret Provisioning to SGX and TDX Workloads
Hardware-rooted sealing encrypts enclave secrets for storage, but binds them to a single processor.
Anouk Mercer
Side-Channel Attack Surfaces in SGX Enclaves
OS-level adversaries can extract secrets from SGX enclaves through deterministic side channels.
Lorena Sundqvist
Intel TDX vs AMD SEV-SNP Architecture Differences
Intel centralizes security in firmware, while AMD distributes it throughout the hardware.
Anouk Mercer