The adoption of Intel SGX in my opinion offers a major competitive advantage over all other similar attempts in it's class to the iExec platform. Golem will not have this capability for quite a while and the only other platform which will have privacy of this nature is Enigma.
The benefit of hardware privacy at the CPU level
The benefit of this level of privacy is that you get the most bang for your buck. In other words you get the most potential privacy for the cheapest cost in terms of implementation, performance, and other measures. The benefits of using Intel SGX in my opinion far outweigh the risks. There of course has been the exposure of Intel CPUs being vulnerable to Meltdown and Spectre. These risks must be considered and because of this we can say Intel does not have the greatest track record currently. The vulnerabilities are based on a technique called "speculative execution" which by it's very name sounds in my opinion ridiculous.
Intel processors built since 1995 are reportedly affected by Meltdown, while Spectre affects devices running on Intel, AMD, and ARM processors. Meltdown is related to the way privileges can be escalated, while Spectre entails access to sensitive data that may be stored on the application’s memory space.
So how does this impact Intel SGX?
Intel SGX is vulnerable to Spectre and an attack has been demonstrated as successful in code. For this reason, it may be the case that Intel SGX is not sufficiently secure for all use cases. This could give the Enigma Protocol an edge over iExec in the fact that Enigma will provide the option to take security to a level beyond the limits of Intel SGX by using the SHE (somewhat homomorphic encryption) scheme they mention in the Enigma Whitepaper.
This quote in particular should be deeply understood:
The most important security finding currently available is that there is no credible engineering rationale to support the contention that SGX enclaves will provide confidentiality guarantees in the face of these new micro-architectural cache probing attacks. This is disappointing for a technology that was designed to provide security guarantees in the face of an IAGO threat model or in the previously described service provider models.
In summary:
- Current Intel SGX offers limited security and cannot guarantee privacy due to the exploit/backdoor micro-architectural cache probing attacks.
- Future Intel SGX may offer fixes to this which could make it secure but can we trust Intel? This is the variable which in my opinion creates the majority of the risk for using future iterations of Secure Enclave.
- While Secure Enclave is a promising idea in theory the implementation which currently exists on the market is for sure vulnerable and should not be trusted. This means Enigma and iExec both are going to be vulnerable to whatever issues exist with Intel architectures and in my opinion both teams must seek to control the risks involved by offering additional security and privacy guarantees. At minimum, new hardware will likely need to be created and for this reason current expectations of privacy must realistically be low for either iExec or Enigma data in the early days until this gets resolved.
Conclusion
I'm still quite content with the progress being made by iExec. The Team is working to provide decentralized computation capabilities for decentralized apps. That said, I am not satisfied with Secure Enclave simply because it doesn't currently work to achieve confidentiality for data in motion based on the listed vulnerabilities discussed above. This means iExec will have to invest additional resources and conduct additional research to improve upon the security guarantees they try to achieve with Intel SGX.
References
- https://medium.com/iex-ec/iexec-dev-letter-14-intel-sgx-security-and-r-14-feb-2018-544d87e28869
- https://www.trendmicro.com/vinfo/us/security/news/vulnerabilities-and-exploits/meltdown-and-spectre-intel-processor-vulnerabilities-what-you-need-to-know
- https://idfusionllc.com/2018/01/25/sgx-after-spectre-and-meltdown-status-analysis-and-remediations/