The Patching Friars' AlmanacA calendar of CVE saints

Patron of November 29

SGX.FailHoly card for sgx-fail, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 SGX ! SGX.Fail ARCA NON SUFFICIT
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Blessed SGX.Fail, Who Counted the Enclave's Falls

Patron of Intel SGX enclaves, those who store precious secrets in them, and researchers who keep the ledger of failures.

Life

In November 2022 a large group of researchers gathered in SGX.fail the tally of years of attacks against Intel SGX, the processor's secure enclave. Lining up the many side channels and attestation flaws, they showed how many applications that entrusted keys and precious data to it, from certain cryptocurrency wallets to DRM systems, were in practice bypassable. The moral: the enclave is not a magic box.

Prayer

O Blessed SGX.Fail, who keeps count of every fall of the enclave, let us not place blind trust in a single box. Amen.

How to celebrate

Celebrated by updating SGX microcode and runtimes and not entrusting all of one's secrets to a single enclave.

No box, however secure, guards every secret alone.

Technical record

Disclosed on
November 29 2022
CVE
No CVE: blessed, not yet canonized by MITRE

Sources: sgx.fail · architecture.fail

📅 Add to your calendar

Saints:Google CalendarApple, Outlook and others (.ics)

Observances (feasts, scourges and miracles):Google CalendarApple, Outlook and others (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.