Update term_specification_matrix.md

confidential-computing · Feb 26, 2024 · 97d75a4 · 97d75a4
1 parent 9284899
commit 97d75a4
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/term_specification_matrix.md b/term_specification_matrix.md
@@ -9,8 +9,8 @@ This matrix provides an overview of key terms related to Confidential Computing,
 | **Confidential Computing**            | The protection of data in use by performing computation in a hardware-based, attested Trusted Execution Environment.                        | [CCC](https://confidentialcomputing.io)                                                                                      | No                                                                                                                              |
 | **Workload Identity**                 | Identity assigned to software workloads for authentication and access management across services and resources.                             | [Microsoft Learn](https://learn.microsoft.com/en-us/entra/workload-id/workload-identities-overview),                                           | Yes, different usages across cloud providers (Microsoft, AWS, Google Cloud).                                                     |
 | **Remote Attestation**                | A process whereby a system produces information about itself (typically cryptographically-backed) and another party verifies that information, allowing decisions to be made about what types of trust relationships are appropriate to the first system. | [IETF RFC 9334](https://datatracker.ietf.org/doc/html/rfc9334), [CCC Blog](https://confidentialcomputing.io/2023/04/06/why-is-attestation-required-for-confidential-computing/)         | No                                                                                                                              |
-| **Enclave**                           | A protected area within a TEE safeguarding code and data from external access.                                                             | [CCC Technical Analysis](https://confidentialcomputing.io/wp-content/uploads/sites/10/2023/03/CCC-A-Technical-Analysis-of-Confidential-Computing-v1.3_unlocked.pdf)                     | No                                                                                                                              |
-| **TEE** (Trusted Execution Environment) | An environment that provides a level of assurance of data confidentiality, integrity, and code integrity by preventing unauthorized entities from viewing, altering, or tampering with data and code in use within the TEE. | [CCC](https://confidentialcomputing.io/wp-content/uploads/sites/10/2023/03/CCC-A-Technical-Analysis-of-Confidential-Computing-v1.3_unlocked.pdf)                                      | No                                                                                                                              |
+| **Enclave**                           | CCC does not currently support this definition as it's not industry wide.                                                            |                      | No                                                                                                                              |
+| **TEE** (Trusted Execution Environment) | An environment that provides a level of assurance of data confidentiality, integrity, and code integrity by preventing unauthorized entities from viewing, altering, or tampering with data and code in use within the TEE. | [CCC](https://confidentialcomputing.io/wp-content/uploads/sites/10/2023/03/CCC-A-Technical-Analysis-of-Confidential-Computing-v1.3_unlocked.pdf)         | No                                                                                                                              |
 | **TCB** (Trusted Computing Base)      | A set of components that can be known and defined, evaluated and verified by a trusting party or its agents, expected to continue in the same state, and used as the foundation for other services or systems. This represents the critical security components including hardware, firmware, and software. | [Wikipedia](https://en.wikipedia.org/wiki/Trusted_computing_base), [Bursell, Mike (2021) Trust in Computer Systems and the Cloud](https://onlinelibrary.wiley.com/doi/book/10.1002/9781119695158), [NIST](https://csrc.nist.gov/glossary/term/trusted_computing_base), [Microsoft Azure](https://learn.microsoft.com/en-us/azure/confidential-computing/trusted-compute-base) | Yes, broad in tech, with variations in trust relationships and confidential computing contexts.                                   |
 | **Memory Isolation**                  | Security feature preventing unauthorized access to data in memory.                                                                         | [Microsoft Azure](https://learn.microsoft.com/en-us/azure/confidential-computing/choose-confidential-containers-offerings)                                                           | Yes, common in computing                                                                                                         |
 | **Measurements**                      | Process of assessing the state of a system or components to ensure integrity.                                                              | [NIST](https://csrc.nist.gov/glossary/term/roots_of_trust)                                                    | Yes, varies in context. Assistance needed in good definition for this.                                                                                                           |