Questions tagged [sgx]

Intel SGX is a set of CPU instruction extensions that allows application developers to create applications that retain the confidentiality and integrity of select data and code using Secure Enclaves.

Intel SGX is a set of CPU instruction extensions that allows application developers to create applications that retain the confidentiality and integrity of select data and code using secure Enclaves.

Enclaves are protected areas of execution. Application code can be put into an enclave via special instructions and software made available to developers via the Intel SGX SDK. The SDK and documentation are available at:

Requirements

SGX requires 6th Generation Intel Core Processors (Skylake) or later.

The Windows SDK requires a 64-bit version of Windows 7 or above, and the Microsoft Universal C Runtime.

The Linux SDK requires Ubuntu Desktop-16.04-LTS 64-bit.

175 questions
0
votes
2 answers

Securing Algorithms in SGX

I am looking for an explanation how to protect an algorithm say a function mysort(param x, param y) in the context of Intel SGX such that outside my enclave mysort() function is encrypted and it only decrypts inside enclave. How could I achieve this…
Kumar Roshan Mehta
  • 3,078
  • 2
  • 27
  • 50
0
votes
0 answers

rsa + aes: Encrypt in JS, decrypt in C (intel SGX)

I am trying to achieve the following result: ask user for a password (works) generate a key based on it using scrypt (works) encrypt some string using aes-js (ctr mode) (works) encrypt the generated key using node-bignumber (js library offering…
0
votes
1 answer

SGX calculating HMAC inside enclave

I'm trying to calculate an HMAC with SHA512 inside an Intel SGX enclave. I got the code to work but receive the wrong results. I have an example that uses static pre-defined key and nonce from which the HMAC is calculated, but when verifying the…
wasp256
  • 5,943
  • 12
  • 72
  • 119
0
votes
1 answer

Cannot create Enclave in SGX Helloworld

Why "[sgx_create_enclavew ..\urts\win\urts.cpp:195] Couldn't open file with CreateFile()" still happens after I setting the working directory from $(ProjectDir) to $(OutDir) both enclave and app? I cannot find the file "sample_enclave.signed.dll" in…
0
votes
1 answer

sgx_ecc256_create_key_pair fail

I've written a very simple test to learn working with elliptic curve cryptography inside an enclave. But the key creation method fails with SGX_ERROR_UNEXPECTED. Here is my enclave: #include "Enc_t.h" #include "sgx_trts.h" #include…
Arya Pourtabatabaie
  • 705
  • 2
  • 7
  • 22
0
votes
4 answers

Error Loading Enclave: Couldn't open file with CreateFile()

I'm trying to write a simple SGX project for a start. So I have this main host application routine that I've pretty much copied from Lars Richter's blog: #define ENCLAVE_FILE _T("Enclave.signed.dll") #include #include #include…
Arya Pourtabatabaie
  • 705
  • 2
  • 7
  • 22
0
votes
3 answers

Trouble Creating and Executing an Intel SGX Enclave

I'm very new to SGX and wanted to start with something simple. Fortunately, I found this very basic tutorial. Unfortunately, as simple as it is, I can't get it to work. The code executes, but there are errors in the output. [sgx_create_enclavew…
Ziz
  • 1
  • 2
0
votes
1 answer

Local attestation with Intel SGX

I'm trying to perform a local attestation between two enclaves created from two different applications. The provided sample code for Linux here creates 3 different enclaves and then establishes secure connections between them. But those enclaves…
wasp256
  • 5,943
  • 12
  • 72
  • 119
0
votes
2 answers

Read file content in SGX enclave

I'm trying to read the content of a file from an enclave using OCalls. enclave.edl: untrusted { void ocall_print_string([in, string] const char *str); void ocall_read_IMA_file([in, string] const char *filename, [out] char *buf, [out]…
wasp256
  • 5,943
  • 12
  • 72
  • 119
-1
votes
1 answer

How to implement dynamic loading inside an Intel SGX Enclave?

Because no standard library can be used inside Intel SGX enclave. How to implement dynamic loading inside an Enclave? For example, I have functions foo1() and foo2() in a file with .so extension type. I need to dynamically load a function inside…
Redpock
  • 11
  • 1
1 2 3
11
12