Xen and Intel Hardware-Assisted Virtualization Security

Intel Software Guard Extensions (SGX) - Secure Enclave

- Preliminary patches
- ITL thoughts on SGX: part1 · part2 (2013)
- Intel slides · video (2017)

Intel Trusted Execution Technology (TXT) - DRTM

- Intel Verifying the Xen launch (2007)
- Qubes Anti Evil Maid (2011)
- Secure policy engine in hypervisor (2015)
- TXT measured launch with TPM 2.0 and OTA update (2017)