What is a secure enclave?

• A. A hardware-protected execution environment that isolates code and data.
• B. A cloud-based storage service.
• C. A virtual machine
• D. A confining phrase.

Answer: (A)

A secure enclave is a hardware-protected execution environment that isolates code and data from the rest of the system, providing confidentiality and integrity even if the surrounding software, including the operating system, is compromised. It uses processor features to keep the sensitive computations and memory shielded, often with attestation to prove that the code inside is genuine and hasn’t been tampered with. This is why keys and other secrets can be processed securely in use, not just stored securely. Technologies like Intel SGX, ARM TrustZone, and AMD SEV are practical examples of secure enclaves. In contrast, a virtual machine relies on software isolation via a hypervisor, which isn’t the same as a hardware-protected execution environment, and cloud storage or a confining phrase don’t describe this protective mechanism.