

I think the phrase “running in the TEE” is the idiomatic way to describe a program running on the main CPU, attested by the TEE processor, and protected/isolated from other processes on the system (modulo exploits, lol). I’m vaguely familiar with AMD’s SEV-SNP, mainly from reading security papers rather than any hands-on experience. I make no claims about Apple’s Secure Enclave, though.




How about the equivalent
malloc(-1)?Also, it’s cheap to allocate memory if you never write to it. You should follow it up with memset() if you really wanna max out your Resident Set Size 🐏