Trusted execution environment

The bank manager cannot inspect its contents.

Using hardware-level trusted execution environments, TEEs, from AMD, Intel, and IBM, the processor encrypts the container's memory space using keys managed directly by the silicon.

The cloud provider hosts the infrastructure, but their hypervisor, host OS, and staff are cryptographically excluded from reading working memory.

Crucially, the industry is converging on open standards rather than proprietary SDKs.

S-

... and also, to be fair, part of the messaging that they have been d- d- promoting just, even just today is, like, the f- it's not in the first half of the press release, but the second half is all about everything is Secure Enclave.

The microphone is s- uh, the audio from the microphone is Secure Enclave.

The video is Se- Secure Enclave.

Don't worry about having an open mic somewhere inside the house.

So I'm sure that they want to be able to promise users buy a... [laughs] Not a...

But then you should probably don't trust verify, as we say in crypto, but then most people do trust and don't verify, which is kind of the weak part of the whole concept of like, I can verify what's happening, which doesn't mean I will.

So You probably need to have the knowledge in your company and the discipline to actually verify that this is the case, that they are not seeing what's happening with your data in their inference machines, right? When I talk about trusted execution environments, TEEs, it is not actually mathematical proof.

It is hardware attestation.

So now you're trusting the chip vendor, Intel, for instance, not trusting the software anymore.

No, no, I mean, it is, it is incredibly nuanced, and it's really good to be informed of all this.

You know, I got a chance to ask Joseph a question, and one benefit I think of using TEEs or these providers is that, um, so in the case where you might be worried...

Like, like so many times you're asking, um, for advice for these models.

Like, like you're like, "Here's things that I'm thinking about." Um, almost no individual can know the full extent of all laws and all jurisdictions.

There's this intense thing that like, okay, this is a service that you cannot, um...

Like even if that data kind of came out, it can't be held against you in like court.

And so that was something I kind of asked, like maybe that's one benefit of TEEs, for example, is to offer that, that guarantee, which you're not, you're-- My understanding is you're not currently getting that if you use like Anthropic and OpenAI.

Yeah.

We then developed a 10-layer security architecture for agentic AI.

We explored confidential computing and trusted execution environments.

And we examined some of the most difficult emerging attack surfaces, tools, runtime environments, persistent memory, and agent-to-agent communication.

But there is a problem.

Now, why does a simple reboot matter so much to digital forensics?

To understand the genius of this defense, we have to look at the architecture of the secure enclave and how iOS handles encryption keys in memory.

When you interact with an iPhone, it exists in one of two cryptographic states.

Okay, walk me through them.

But if the phone reboots, it shifts into the second state.

Yes, the BFU state: Before First Unlock.

In BFU, the encryption keys are purged from the quick access memory and are deeply locked inside the secure enclave processor.

So what does that mean for the phone itself?

...

the encryption and the, the Secure Enclave and..." Uh, and by then they've walked off, so it doesn't really matter.

[laughs]

[laughs]

But I also think it's going to be interesting when people see exactly how this works.

And I think there are some of the... requests where people are thinking that with secure enclave they're going to be able to unlock file vault with their idp which is not how this works not how any of this works but um you know i'm i'm looking forward to these features evolving throughout um you know, the 27 release, but I'm also excited.

I have to say, I'm excited to see how many people are actually using platform single sign on now in production.

So yeah.

But when that light bulb goes off, it's spectacular.

So, you know, this is something I'm going to be paying really close attention to.

I'm really excited that Okta have now got Secure Enclave out there.

Yes.