Researcher warns: don't put valuable secrets in TEEs, or they will likely become public
It's time to talk about TEEs
A survey of attacks on Trusted Execution Environments (TEEs) argues that remote attestation can be forged through physical and microarchitectural exploits—from Foreshadow and SGAxe to BadRAM, WireTap.fail, and TEE.fail—and that liveness bugs can leave enclaves paralyzed. Even if your threat model excludes physical attacks, a verifier that accepts any Intel CPU in good standing trusts the attacker's CPU too. The conclusion: avoid storing valuable secrets in TEEs.
Don’t put valuable secrets in your TEEs, or they’re likely to become public, especially if physical attacks are in your threat model.