Eli Ben-Sasson | Starknet.io@EliBenSasson
This is as good a time as ever to recall why TEEs are not to be used in decentralized blockchain infrastructure.
Each TEE holds within it a secret key. That secret key is physically present there. If you extract that key, all security is toast. Now, given that it's physically there, there's a $ sum for which it can be extracted. That sum will keep going down with time.
It's the same story as TPM (the previous iteration of this tech). When I last checked, you could extract the key of a TPM for about $5,000.
I don't know what the price is of extracting a key from a TEE. But I'm guessing its less then $1B. So if you want a blockchain to be (1) decentralized, and (2) secure more than that, you simply cannot use a TEE in it.
So, when *can* you use a TEE? Well, if you're running a centralized, or permissioned, system, where you're needed to vouch everything that happens, then you don't need a TEE, but it could come handy as part of your security theater.
StarkWare has been at the vangaurd of ZK STARKs, now considered the end game for scaling blockchain. We practice what we preach. We never used a TEE, and won't in the future. We trust the integrity of the math of ZK STARKs and our systems. They are battle tested, and have no toxic waste, no secret keys to extract. That's what you must use as well.