Heres another prime and probe issue. SGX was supposed to be fencing itself against associated timing attacks. According to this article and its backgrounded links, a hypervisor can leak information to itself by compromising branch prediction units and using "near field" affected border timing exploits.
https://www.theregister.co.uk/2018/03/28/intel_shrugs_off_new_sidechannel_attacks_on_branch_prediction_units_and_sgx/ -- Russell --- Talk Mailing List [email protected] https://gtalug.org/mailman/listinfo/talk
