https://community.intel.com/t5/Intel-Confidential-Computing/Multi-applications-and-ocall/m-p/1111544#M1316 <P>If an enclave is used by multiple applications and makes an ocall,<BR /> <SPAN style="font-size: 1em;">which application will get the ocall? &nbsp;</SPAN><BR /> <SPAN style="font-size: 1em;">I would hope it is the one who owns the stack which made the containing ecall?. &nbsp;Would that be a safe assumption?</SPAN></P> <P>Besides an answer, a reference would also be appreciated.<BR /> Thanks</P> <P>&nbsp;</P> Mon, 12 Dec 2016 19:00:05 GMT Chris_J_4 2016-12-12T19:00:05Z https://community.intel.com/t5/Intel-Confidential-Computing/Multi-applications-and-ocall/m-p/1111544#M1316 <P>If an enclave is used by multiple applications and makes an ocall,<BR /> <SPAN style="font-size: 1em;">which application will get the ocall? &nbsp;</SPAN><BR /> <SPAN style="font-size: 1em;">I would hope it is the one who owns the stack which made the containing ecall?. &nbsp;Would that be a safe assumption?</SPAN></P> <P>Besides an answer, a reference would also be appreciated.<BR /> Thanks</P> <P>&nbsp;</P> Mon, 12 Dec 2016 19:00:05 GMT https://community.intel.com/t5/Intel-Confidential-Computing/Multi-applications-and-ocall/m-p/1111544#M1316 Chris_J_4 2016-12-12T19:00:05Z https://community.intel.com/t5/Intel-Confidential-Computing/Multi-applications-and-ocall/m-p/1111545#M1317 <P>Hi, Chris.</P> <P>AFAIK one single enclave "instance" cannot be shared by various applications. By saying this, I mean that, <SPAN style="font-size: 13.008px;">using the SGX SDK,</SPAN>&nbsp;an application cannot make an ECALL to an enclave that it has not created. Trying to do so will cause an SGX_ERROR_INVALID_ENCLAVE error.</P> <P>Best regards,</P> <P>Rodolfo</P> Tue, 13 Dec 2016 02:10:27 GMT https://community.intel.com/t5/Intel-Confidential-Computing/Multi-applications-and-ocall/m-p/1111545#M1317 Rodolfo_S_ 2016-12-13T02:10:27Z