TRAIL OF BITS
Powered by

Top TEE bugs you should fix before your audit

Trail of Bits

01:03:11

Watch

TEE’s are growing in popularity, and with success comes security concerns. During this webinar, with the help of Jules Drean from Tinfoil, two of our senior security engineers, Paul Bottinelli and Tjaden Hess, will walk through what we do in the first few hours of a real TEE stack audit. Jules will act as our tour guide, covering Tinfoil’s repositories, including hardware configurations, CVM images, and more. Paul and Tjaden will highlight the top areas to examine and present frameworks to understand the different levels of confidential computing security.

During this 45-minute webinar, you’ll hear and see:

  • The frameworks for understanding different levels of confidential computing security
  • A real-life example of some TEE bugs we’ve seen in our audits
  • Discussion of findings like report attestation verification, policy checking for AMD and TDX, traffic padding, and side channel considerations

Speakers

Tjaden Hess

Tjaden Hess

Principal Security Engineer, Cryptography @ Trail of Bits

Paul Bottinelli

Paul Bottinelli

Principal Security Engineer, Cryptography @ Trail of Bits

Jules Drean

Jules Drean

Co-Founder, Tinfoil

Jules is the co-founder of Tinfoil where he is building verifiably private AI. Before Tinfoil, he was at MIT where he got his PhD in secure hardware and cryptography. He also spent some time at NVIDIA and Microsoft Research working on confidential computing.

Host your event on

Top TEE bugs you should fix before your audit

01:03:11

Watch