Today? It should be fairly easy to recover anything you want with a debugger, given sufficient time and effort.<p>In future versions once SGX is available (&gt;= Intel Skylake)? Good luck extracting data from an encrypted enclave. This is, after all, the intended purpose[1] for SGX - to create the &quot;trusted computing&quot; (DRM) that Microsoft has wanted for the last decade[2]. It&#x27;s not like these new instructions are for the end-user; Intel has to authorize[3] you binary before it can be loaded into an enclave.<p>Anybody using the CDM - even sandboxed - is helping to create that future. If this isn&#x27;t fought and rejected <i>now</i>, yet another battle in the War On General Purpose Computers will be lost.<p>[1] <a href="https:&#x2F;&#x2F;software.intel.com&#x2F;en-us&#x2F;blogs&#x2F;2013&#x2F;09&#x2F;26&#x2F;protecting-application-secrets-with-intel-sgx" rel="nofollow">https:&#x2F;&#x2F;software.intel.com&#x2F;en-us&#x2F;blogs&#x2F;2013&#x2F;09&#x2F;26&#x2F;protecting...</a><p>[2] &quot;Palladium&quot; &#x2F; &quot;Next-Generation Secure Computing Base&quot; in the early 2000s<p>[3] <a href="https:&#x2F;&#x2F;jbeekman.nl&#x2F;blog&#x2F;2015&#x2F;10&#x2F;intel-has-full-control-over-sgx&#x2F;" rel="nofollow">https:&#x2F;&#x2F;jbeekman.nl&#x2F;blog&#x2F;2015&#x2F;10&#x2F;intel-has-full-control-over...</a>