confidential computing

Confidential computing's core trust mechanism is broken. The fix may not exist

a month ago

Confidential computing relies on remote attestation to prove a server runs in a genuine Trusted Execution Environment (TEE) before sharing sensitive data.
New research reveals flaws in attested TLS protocols used in confidential computing, allowing relay attacks where a client’s connection can be redirected to a compromised server without detection.
The study formalizes three levels of cryptographic binding for attestation, with level three (tying evidence to application traffic keys) potentially unattainable in current intra-handshake architectures.
Real-world implementations like Meta’s WhatsApp, Edgeless Systems’ Contrast, and Cocos AI are vulnerable, leading to CVE-2026-33697, a high-severity vulnerability.