可信执行环境面临多种严重安全威胁

可信执行环境（TEE）作为处理敏感数据的关键安全机制，近年来却频频曝出重大漏洞。1安全研究人员在2018年至2026年期间，针对Intel SGX、AMD SEV等主流TEE平台发现了一系列攻击方式，包括远程证明伪造和物理侧信道攻击，这些漏洞可能导致秘密信息泄露。1

具体而言，2018年的Foreshadow漏洞允许恶意操作系统窃取Intel SGX证明密钥。12022年ÆPIC Leak漏洞则通过微架构漏洞使主机root权限管理员能够窃取SGX证明密钥。12024年的BadRAM攻击通过成本约10美元的DIMM SPD芯片篡改，可在AMD SEV-SNP系统上运行后门虚拟机。1

最近的物理中间人攻击尤其令人关注。2025年WireTap.fail利用DDR4系统的物理中间人攻击成功提取了SGX证明密钥，已知影响Secret Network、Phala、Crust和IntegriTEE等实际应用软件。1DDR5系统也面临类似的物理中间人攻击威胁。1此外，2018年的Spectre和Meltdown漏洞导致SGX凭证被吊销，造成TEE飞地陷入瘫痪。1

面对这些威胁，安全建议包括通过PIN验证器限制仅接受自身PCK证书的方式来防止攻击，但这需要谨慎管理PKI基础设施。1研究人员强调，在部署基于TEE的应用时必须谨慎评估威胁模型，避免在TEE中存储价值极高的秘密。1

Researchers have identified a series of critical security flaws affecting trusted execution environments (TEEs) across major platforms, raising concerns about the safety of deploying TEE-based applications in production environments 1. The vulnerabilities span from 2018 to 2025 and range from remote attestation forgery to physical side-channel attacks, with potential consequences including secret extraction and system compromise 1.

Several high-impact attacks have emerged over this period. In 2018, the Foreshadow vulnerability allowed malicious operating systems to steal Intel SGX attestation keys 1. In 2022, the ÆPIC Leak exploited microarchitectural weaknesses to enable host root administrators to extract SGX attestation keys 1. More recently, the BadRAM attack demonstrated that tampering with DIMM SPD chips—achievable at a cost of approximately $10—could allow deployment of backdoor virtual machines on AMD SEV-SNP systems 1. In 2025, the WireTap.fail physical man-in-the-middle attack successfully extracted SGX attestation keys from DDR4 systems, affecting real-world software including Secret Network, Phala, Crust, and IntegriTEE 1. Additionally, DDR5 systems face comparable physical attacks through the TEE.fail vulnerability 1. In 2018, Spectre and Meltdown attacks led to SGX credential revocation, rendering TEE enclaves unusable 1.

Experts recommend implementing PIN verification and restricting certificate acceptance to self-issued platform certificates to mitigate these threats, though such measures require careful PKI infrastructure management 1. Developers are advised to carefully evaluate threat models before deploying applications in TEEs and should avoid storing high-value secrets within these environments 1.