Intel SGX
Intel Software Guard Extensions — hardware-isolated TEE (Trusted Execution Environment). Apps run i "enclave" där even kernel + hypervisor cannot read memory. Skylake+ (2015), deprecated konsument-CPUs 2021.
Use cases: DRM (Netflix 4K-streaming required SGX), confidential-computing (Fortanix, Anjuna), private-keys management. Sårbarhetslista bjössningsstark: Foreshadow (2018), Plundervolt (2019), SGAxe (2020), ÆPIC Leak (2022). Intel deprecated SGX i 11th-gen+ desktop/laptop CPUs — bara Xeon-server still has. Modern alternative: AMD SEV-SNP, ARM TrustZone, AWS Nitro Enclaves. Confidential-VM-trend: Microsoft Azure DCSv3 (SGX-VMs), Google + Azure confidential-compute via AMD-SEV. SGX historiskt overpromised, never reached mainstream-adoption.