Saint Sigy, Who Sent False Signals

Patron of enclaves, confidential virtual machines, and programs that believe every signal they receive.

Life

On 4 April 2024 Shweta Shinde's group at ETH Zurich presented Sigy, one of the Ahoi family of attacks. In confidential computing the host is treated as hostile, yet a malicious hypervisor could inject fake signals into protected Intel SGX enclaves, and the programs inside took them for real and strayed from their path. Gramine, SCONE and other runtimes got CVEs and fixes.

Prayer

O Saint Sigy, who knocks on the cell with signals nobody sent, teach our enclaves to tell a true exception from the tempter's voice. Amen.

How to celebrate

Celebrated by updating Gramine and the other enclave runtimes, and repeating that the host is no friend.

Not every signal comes from heaven.