0

What is the difference between Intel Guard Extensions (SGX) and Trusted Module Platform (TPM)?

This answer tells you what the similarities are and what the features are, but not explicitly what the differences are.

schroeder
  • 123,438
  • 55
  • 284
  • 319
user199561
  • 1
  • 1
  • Actually, it does talk a lot about the differences. If it is not meeting your needs, can you explain more about what you are looking for? – schroeder Feb 14 '19 at 10:55
  • 2
    There are a lot of differences because they are two totally different technologies. – forest Feb 14 '19 at 11:00
  • In my opinion the answer tells you only what the features are. I can't really make out the differences. Could you tell me the three main differences between them? – user199561 Feb 14 '19 at 11:46
  • 1
    @user199561 Did you read the duplicate though? It explains the _differing_ features. The two technologies are very, very different so the differences are vast. Three random examples? 1) There are many implementations of TPM, but only one of SGX (Intel's implementation). 2) TPM does not execute bytecode from the computer, whereas SGX enclaves do. 3) SGX is unique to Intel, whereas TPM can also be used by AMD or even ARM. – forest Feb 14 '19 at 12:27
  • @forest and what are the functional differences? – user199561 Feb 14 '19 at 13:00
  • 1
    @user199561 That is also explained in the answer. TPM is designed for attestation, whereas SGX is designed for tamper-prevention, for example. – forest Feb 14 '19 at 13:01

0 Answers0