It's time to talk about TEEs
Summary
This post surveys attacks on trusted execution environments (TEEs) and argues for re-evaluating how to deploy TEE-based applications. It covers enclave code bugs, remote attestation forgery, liveness issues, and high-profile attacks, concluding that TEEs may not protect secrets as reliably as hoped and highlighting PKI and threat modeling considerations.