Intel SGX
A trusted execution environment technology introduced by Intel that protects sensitive code and data by creating isolated memory regions called enclaves; it is one of the primary hardware implementations of confidential computing.
Timeline (last 90 days)
TEE (Trusted Execution Environment) technologies such as ARM TrustZone, Intel SGX, and AMD SEV have existed for many years.
Side-channel attacks (such as cache timing and power analysis) have repeatedly broken through TEE implementations such as Intel SGX.
CPU-based TEE solutions (such as Intel SGX) restrict protected memory (EPC) to a small capacity, causing large model workloads to frequently trigger memory swapping, with performance overhead potentially reaching several times to tens of times.
Confidential computing relies on Trusted Execution Environments (TEEs) provided by CPU vendors; data is decrypted and processed within hardware-isolated enclaves, and cloud service operators, the virtual machine management layer, and even the operating system kernel cannot access plaintext data inside the enclave.
Intel SGX context-switch overhead can reach 10–30%, and memory encryption adds 5–15% latency.
TrustedRouter runs on attested infrastructure and uses Trusted Execution Environment (TEE) technologies such as Intel SGX, AMD SEV, or NVIDIA Confidential Computing.
The available memory of Intel SGX secure enclaves was long constrained to 128MB–256MB, with later versions having expanded it to several GB.
可信执行环境（TEE）的主流实现包括Intel SGX、ARM TrustZone和AMD SEV
Intel SGX、ARM TrustZone和AMD SEV是可信执行环境（TEE）的主流实现
All Facts (9)
The available memory of Intel SGX secure enclaves was long constrained to 128MB–256MB, with later versions having expanded it to several GB.
70%UnverifiedSide-channel attacks (such as cache timing and power analysis) have repeatedly broken through TEE implementations such as Intel SGX.
50%UnverifiedTEE (Trusted Execution Environment) technologies such as ARM TrustZone, Intel SGX, and AMD SEV have existed for many years.
50%UnverifiedCPU-based TEE solutions (such as Intel SGX) restrict protected memory (EPC) to a small capacity, causing large model workloads to frequently trigger memory swapping, with performance overhead potentially reaching several times to tens of times.
50%UnverifiedConfidential computing relies on Trusted Execution Environments (TEEs) provided by CPU vendors; data is decrypted and processed within hardware-isolated enclaves, and cloud service operators, the virtual machine management layer, and even the operating system kernel cannot access plaintext data inside the enclave.
50%UnverifiedIntel SGX context-switch overhead can reach 10–30%, and memory encryption adds 5–15% latency.
50%UnverifiedTrustedRouter runs on attested infrastructure and uses Trusted Execution Environment (TEE) technologies such as Intel SGX, AMD SEV, or NVIDIA Confidential Computing.
50%Unverified可信执行环境（TEE）的主流实现包括Intel SGX、ARM TrustZone和AMD SEV
50%UnverifiedIntel SGX、ARM TrustZone和AMD SEV是可信执行环境（TEE）的主流实现
50%