On Thu, 2018-12-13 at 07:49 +0200, Jarkko Sakkinen wrote: > On Thu, 2018-12-13 at 07:27 +0800, Huang, Kai wrote: > > > This all should be summarized in the documentation (high-level model and > > > corner cases). > > > > I am not sure whether it is necessary to document L1TF explicitly, since it > > is > > quite obvious that MKTME doesn't prevent that. IMHO if needed we only need > > to > > mention MKTME doesn't prevent any sort of cache based attack, since data in > > cache is in clear. > > > > In fact SGX doesn't prevent this either.. > > Sorry, was a bit unclear. I meant the assumptions and goals. I.e. what I put in my earlier response, what belongs to TCB and what types adversaries is pursued to be protected. /Jarkko
