New physical attacks are quickly diluting secure enclave defenses from Nvidia, AMD, and Intel

New physical attacks are eroding confidence in secure enclaves from Nvidia, AMD and Intel, as researchers show that TEEs such as Nvidia Confidential Compute, AMD SEV-SNP, and Intel SGX/TDX can be defeated by inexpensive hardware placed between memory and the motherboard.

The latest method, called TEE[.]fail, requires compromising the kernel and a brief three‑minute interposer attack to render Confidential Compute, SEV-SNP and TDX/SDX untrustworthy, broadening attacks beyond earlier DDR4‑targeted flaws to DDR5 as well. The researchers demonstrated attacks against services including BuilderNet, dstack and Secret Network, including the ability to decrypt traffic, forge attestations and extract key material and network secrets at times.

Deterministic encryption lies at the root of these flaws, enabling replay and impersonation attacks, while mitigations such as adding entropy to ciphertext blocks and improved attestation verification are described as partial fixes. The equipment costs under $1,000 and fits into a 17‑inch briefcase, underscoring how easily a determined operator could compromise a protected server when physical access is available.

Several vendors have acknowledged the research and stressed that physical controls and broader protections remain essential, while some providers declined to comment.