Heres another prime and probe issue. SGX was supposed to be fencing itself against associated timing attacks. According to this article and its backgrounded links, a hypervisor can leak information to itself by compromising branch prediction units and using "near field" affected border timing exploits. https://www.theregister.co.uk/2018/03/28/intel_shrugs_off_new_sidechannel_at... -- Russell