@v12sec: broke Signal's SGX enclave, leaked key to decrypt contact lists

mishaderidder.eth · 2026-08-27T07:09:58.000Z

Signal's Contact Discovery automatically sends your contact list information to an SGX enclave in the cloud. V12 broke into that enclave and leaked the key, allowing the server host to decrypt everything. Two separate critical bugs: arbitrary read and RCE. Here's how. 🧵

Back

Join our TG SubmitDisconnect

@v12sec: broke Signal's SGX enclave, leaked key to decrypt contact lists

by mishaderidder.eth12903 🥝 • 2h •

x.com

Characters remaining: 10,000

comment guidelines