In reply to @v12sec

While SGX protects enclave memory, the host still controls the machine around it. The host invokes enclave calls, schedules threads, and manages page tables. As ORAM is expensive, the database is split into shards, each serviced by an enclave worker. A malicious host can use