EnGarde: Mutually-Trusted Inspection of SGX Enclaves
Controlled-Channel Attacks: Deterministic Side Channels for Untrusted Operating Systems