ព័ត៌មានសំខាន់
Intel has announced plans to discontinue its Software Guard Extensions (SGX) technology following the release of its upcoming Xeon Diamond Rapids CPUs. The company intends to shift its confidential computing focus toward Trust Domain Extensions (TDX) to better address the needs of cloud computing, enterprise workloads, and agentic AI applications.
The two technologies utilize distinct security approaches. SGX creates hardware-protected enclaves within applications to isolate specific code and data from the operating system and hypervisor. Conversely, TDX isolates entire virtual machines from the host environment. Because TDX does not require developers to modify applications, it offers greater ease of deployment and scalability compared to the application-specific enclave model of SGX.
Intel plans to enhance TDX with new features, including trusted I/O via TDX Connect, post-quantum cryptography, and improved attestation mechanisms. These additions aim to secure data transfers between virtual machines and peripherals, though Intel has not provided specific availability dates for these upgrades. The company clarified that security vulnerabilities are not the reason for phasing out SGX.
While Diamond Rapids will be the final Xeon generation to support SGX, Intel will maintain support and security updates for existing SGX-enabled platforms into the early 2030s. TDX is currently available through major cloud providers such as Google Cloud, Microsoft Azure, and IBM Cloud, with software platform support expanding across Red Hat, Canonical, and VMware.
