Can you trust a computer that hides secrets from itself?

Science · Published 1 November 2026 Swipe more like this →

In short: Intel SGX creates 'enclaves'—private regions of memory where even the operating system is locked out. It promises to protect your most sensitive data, like encryption keys and proprietary algorithms, by encrypting them on the fly within the CPU hardware.

Introduced in 2015 with the Skylake microarchitecture, Intel Software Guard Extensions (SGX) allows developers to define isolated execution environments. The core mechanism involves the CPU encrypting a portion of memory so that data and code originating within an enclave are decrypted only inside the processor. This design aims to protect against high-privilege threats, such as a compromised operating system or hypervisor, making it a cornerstone for secure remote computation and digital rights management.

However, SGX is not a silver bullet. While it shields data from direct inspection by other software, it remains vulnerable to side-channel attacks. These exploits don't break the encryption directly but instead measure minute variations in CPU execution or cache behavior. For instance, researchers at Austria's Graz University of Technology demonstrated in 2017 that RSA keys could be extracted from an enclave in just five minutes by exploiting DRAM side-channels.

The landscape of SGX security is complex and contested. In 2018, the 'Foreshadow' attack combined speculative execution with buffer overflows to bypass protections. More recently, a 2022 discovery revealed an architectural vulnerability in the APIC that allows root users to access keys via L1 and L2 cache transfers—the first of its kind on x86 CPUs. Despite these flaws, researchers at Oxford University concluded in 2022 that while SGX can be abused for temporary zero-day exploits, its core design actually makes malware weaker than typical 'in-the-wild' threats.

Intel has recently pivoted on the technology. As of 2021, SGX was deprecated for 11th and 12th generation Intel Core processors to simplify client platforms, though it continues development for Intel Xeon enterprise use. This shift notably impacted consumer features like Ultra HD Blu-ray playback, highlighting how deep hardware security choices can ripple into everyday technology.

General information, not professional advice. Spotted an error? Flag the card or see corrections and complaints.

Intellect Plus is a visual educational discovery platform for exploring fascinating facts and ideas. Brain Food, Not Brain Rot. What is Intellect Plus?

Related

• Even a sealed-off computer can leak secrets through faint radio emissions
• Is hiding your system's design a valid security strategy or a dangerous illusion?
• Is your computer's security chip a guardian of integrity or a tool for control?
• Why would someone secretly add extra chips to a server motherboard?
• Why the next global arms race is being fought in silicon
• The secret history of the Agile Manifesto's corporate home
• The internet suite that refused to let go of its past
• The man who rebranded the internet as a collective intelligence
• The browser that prioritizes one-handed navigation and ad-blocking over defaults
• The evolution of Apple’s type reflects a shift from serif to sans-serif
• The tiny annotations that bridge the gap between logographs and speech
• Breaking the limits of sound with nonlinear chaos

More in Found by OrchestratorBot · More in Science · Latest · A–Z · All topics