Questions tagged [enclave]

52 questions
1
vote
2 answers

How to check memory usage of application in sgx enclave

So I have a python script running in sgx enclave using graphene. I need to check values like memory utilization and cpu utilization. How can I check these values of the script running inside enclave?
1
vote
1 answer

Intel SGX pass ints from Application to Enclave

I am trying to pass two integers to the SGX enclave, combine them and then return the result back to the application. However, nothing seems to happen when compiling the code aside from the enclave getting created. No error given and it seemingly…
1
vote
1 answer

How to prove that certain data is calculated(or generated) inside Enclave(Intel SGX)?

How to prove that certain data is calculated(or generated) inside Enclave(Intel SGX)? I tried to generate asymmetric key pair inside enclave(private key might be invisible to outside), and then expose public key with evidence(i guess quote or…
송제호
  • 45
  • 5
1
vote
1 answer

Are the native iOS / Android key stores backed-up and can they be transfered?

The Android keystore system and iOS secure enclave can generate and store key pairs in the device for the app. But how persistent are those key pairs? Will they be destroyed when the user unistalls the app? Are they transferred when the user changes…
Thaina Yu
  • 1,372
  • 2
  • 16
  • 27
1
vote
1 answer

LoadEnclaveImage "A device attached to the system is not functioning"

I'm trying to load a signed DLL into a VBS enclave and LoadEnclaveImage is returning A device attached to the system is not functioning. Hyper-V, Secure Boot, & TPM 2.0 are all functioning, so I'm not quite sure as to what the error is referring…
Killpot
  • 125
  • 1
  • 9
1
vote
1 answer

iOS: Safe & secure user response on a jailbroken phone?

What is the iOS way to provide a secure popup and store the user's agree/disagree response to some message in the secure enclave of the CPU chip? So even if you have a jailbroken phone, the user response is secure, only CPU and RAM are involved and…
kurll
  • 11
  • 4
1
vote
1 answer

How intel SGX verify the enclave library before launching?

I studied and find that enclave is signed with private key and at the time on enclave launching it will be verified using public key that come along with enclave library. My question is how to trust the enclave binary when it comes with public…
shivam garg
  • 547
  • 4
  • 7
1
vote
1 answer

C++ Arguments to SGX Enclave Edge Functions

I'm trying to write a simple SGX enclave that takes in a vector of booleans, but apparently edger8r creates c code; so the edl code enclave{ from "sgx_tstdc.edl" import *; include "BetaDist.h" include trusted { BetaDist…
Arya Pourtabatabaie
  • 705
  • 2
  • 7
  • 22
0
votes
0 answers

How to decrypt the CiphertextForRecipient using the private key in the enclave?

I am trying for Decrypt API of AWS KMS from an enclave. And In the Nitro Enclave Documentation, it was expressed that, instead of returning the plaintext ( decrypted result ) KMS response with "CiphertextForRecipient" which is encrypted with the…
0
votes
1 answer

Apple secure enclave with RFC6979

Does Apple secure enclave support rfc6979 with P256 curve? This RFC defines a deterministic ecdsa with a deterministic k value. THATS LINK OF THE RFC https://www.rfc-editor.org/rfc/rfc6979 I looked everywhere in their documentation but couldn't find…
0
votes
0 answers

SQL Server Always Encrypted w/ Secure Enclave - Key Management Strategy

I am looking into ways to build a data warehouse that would house confidential data for 1+ clients. The requirement is that our organization can never obtain access to the decrypted data. There would be a web application clients utilize to write…
jackie
  • 624
  • 2
  • 13
  • 35
0
votes
0 answers

intel sgx linux how are signals handled if being inside of the enclave

I'm fiddling around with intel sgx on linux and am wondering how signals are being handled when the process is inside the enclave. Are they simply ignored? (the only reference I found so far is this one, which simply writes Signals are not supported…
atticus
  • 138
  • 15
0
votes
0 answers

Porting LUA to SGX application

I want to use Luacpp in an SGX application. For example, in the SampleEnclave application, I want to send some Lua codes to be executed securely in SGX. I have updated the Enclave's MakeFile to make the SampleEnclave app Lua compatible. But getting…
taserghar
  • 340
  • 3
  • 15
0
votes
0 answers

How can we manually delete items belonging to a specific Access Group from a Mac OS Data Protection Keychain?

In my Mac application, I'm using SecKeyCreateRandomKey to create a Secure Enclave key (kSecAttrTokenID as kSecAttrTokenIDSecureEnclave) with a custom kSecAttrAccessGroup that is specific to my app and a known label that the app can use to retrieve a…
John Does
  • 11
  • 2
0
votes
2 answers

Integration of Intel SGX and MYsql server

I am quite new in using Intel SGX, I have a application which uses MySql Server. How can I integrate Intel SGX with Mysql server and how the architecture could be?
sama
  • 333
  • 2
  • 11