> Until now the only way to do that was on device
as usual, Apple's implementation is exceptional, but far from the first. see https://confidentialcomputing.io/ and its long history
as usual, Apple's implementation is exceptional, but far from the first. see https://confidentialcomputing.io/ and its long history
2019 Linux Foundation Confidential Computing
2015 Intel SGX (Skylake)
2014 Apple Secure Enclave (A8, iPhone 6)Might be worth pointing out that SGX was compromised repeatedly and comprehensively by speculative execution attacks, e.g.
https://www.usenix.org/conference/usenixsecurity18/presentat...