Intel to End SGX Support in Xeon Processors

Intel is set to discontinue support for its Software Guard Extensions (SGX) technology in future Xeon processors, with the Diamond Rapids generation marking the end of its integration. Reports from technology publication Tom's Hardware indicate that the company is shifting its strategic focus in confidential computing to Trust Domain Extensions (TDX).

SGX is a hardware-based security feature developed by Intel that creates protected, isolated enclaves within applications. It isolates sensitive code and data from the operating system and other software, commonly used for protecting keys or business logic. Intel has stated that existing SGX platforms will receive security updates and support until the early 2030s, allowing customers a transition period.

TDX, conversely, is Intel's confidential computing technology designed for virtual machines. Unlike SGX, which often requires developers to modify applications, TDX isolates entire virtual machines from the underlying host environment and other VMs. This enables businesses to run existing applications in cloud servers without significant software rework.

Intel asserts that TDX offers greater scalability and easier deployment, aligning with operational models for large-scale confidential computing. The company plans to expand TDX capabilities with features like Trusted I/O, post-quantum cryptography, and enhanced attestation. TDX is already available through major cloud service providers, including Alibaba Cloud, Google Cloud, and Microsoft Azure.