topic Linux SDK does not export all crypto functionality in Intel® Software Guard Extensions (Intel® SGX)

Linux SDK does not export all crypto functionality

Urs_M_ — Tue, 13 Dec 2016 06:57:04 GMT

Hey folks,

the cryptography functionality offered in the Linux SDK seems quite limited. Sadly, a lot of functionality available in the source code is not exported by the SDK. Another post (see https://software.intel.com/en-us/forums/intel-software-guard-extensions-intel-sgx/topic/699503) mentions IPP. I do not really want to use it, however. Is there a way to compile the Linux SDK such that more functionality is exported?

Hiya,

barratt__samathy — Mon, 19 Dec 2016 16:09:39 GMT

Hiya,

I'm working with the same issues here at a non-Intel company - utilising the lower level Diffie-Hellman key exchange functions in the SGX SDK is challenging to say the least, due to lacking documentation.
I've managed to get fairly far by reading the SDK source from the Github page and working out the API from there.

From my own research into the Linux SDK, I havent managed to find anything that looks like the IPP Crypto API.
There is /some/ of the same functionality, but the functions and data structures are named totally different things, with different parametres, and sizes.

I'd also be very intrested in seeing the answer too - would love to see the full crypto functionality offered with better docs & examples.

Samathy.

I didn't answer before

Juan_d_Intel — Mon, 09 Jan 2017 21:13:34 GMT

I didn't answer before because Urs seems to be looking for an alternative to IPP crypto, which isn't available at this point.

Samathy, the Linux SDK includes the full IPP crypto API, however it's not exposed directly, i.e. you won't find the IPP crypto header files anywhere. The post mentioned above explains how to expose the IPP crypto API, for which you basically need the header files.