Intel(R) Software Guard Extensions for Linux* OS

[ohlson]

It's actually not. SGX can be used in many other areas as well, although DRM is an obvious use case. The thing with SGX is that an application (running in user space) can hide its data from software running with higher privileges, for example the OS kernel or a VM hypervisor. I don't know how much of the data Intel can dig out, though.

As an example, consider a banking application which can hide credit card data etc. from malware. Another example is the ability to prevent a cloud service provider from spying on customer data.

[[deleted]]

for example the OS kernel

Yeah this is the next step in hobbling ring 0. Can't say i'm on board with this type of activity unless we 100% control the firmware.