https://miscreants.github.io/blog.trailofbits.com/categories/confidential-computing/Recent content in confidential-computing on The Trail of Bits BlogHugoen-usThu, 30 Oct 2025 00:00:00 -0400https://miscreants.github.io/blog.trailofbits.com/2025/10/30/vulnerabilities-in-luks2-disk-encryption-for-confidential-vms/Thu, 30 Oct 2025 07:00:00 -0400https://miscreants.github.io/blog.trailofbits.com/2025/10/30/vulnerabilities-in-luks2-disk-encryption-for-confidential-vms/Trail of Bits is disclosing vulnerabilities in confidential computing systems that use LUKS2 for disk encryption. These vulnerabilities allow attackers with access to storage disks to extract confidential data and modify contents.https://miscreants.github.io/blog.trailofbits.com/2024/09/24/notes-on-aws-nitro-enclaves-attack-surface/Tue, 24 Sep 2024 09:00:36 -0400https://miscreants.github.io/blog.trailofbits.com/2024/09/24/notes-on-aws-nitro-enclaves-attack-surface/In the race to secure cloud applications, AWS Nitro Enclaves have emerged as a powerful tool for isolating sensitive workloads.<br> But with great power comes great responsibility-and potential security pitfalls. As pioneers in confidential computing security, we at<br> Trail of Bits have scrutinized the attack surface of AWS Nitro Enclaves, uncovering potential bugs that could compromise even these<br> hardened environments.https://miscreants.github.io/blog.trailofbits.com/2024/01/26/enhancing-trust-for-sgx-enclaves/Fri, 26 Jan 2024 09:00:31 -0500https://miscreants.github.io/blog.trailofbits.com/2024/01/26/enhancing-trust-for-sgx-enclaves/Creating reproducible builds for SGX enclaves used in privacy-oriented deployments is a difficult task that lacks a convenient and robust solution. We describe using Nix to achieve reproducible and transparent enclave builds so that anyone can audit whether the enclave is running the source code it claims, thereby enhancing the security of […]