topic Use MKL in Enclave in Intel Confidential Computing

Use MKL in Enclave

you_w_ — Mon, 26 Jun 2017 08:11:28 GMT

How can I use MKL in Enclave？

/usr/bin/ld: /opt/intel/compilers_and_libraries_2017.4.196/linux/mkl/lib/intel64/libmkl_core.a(mkl_msg_support.o): undefined reference to symbol 'fflush@@GLIBC_2.2.5'
//lib/x86_64-linux-gnu/libc.so.6: error adding symbols: DSO missing from command line
collect2: error: ld returned 1 exit status
makefile:203: recipe for target 'enclave.so' failed
make: *** [enclave.so] Error

While trying to use MKL functions in enclave I meet this error, what can I do, to make it works.

You can not use untrusted

Shivananda_H_Intel — Thu, 29 Jun 2017 11:15:46 GMT

You can not use untrusted library calls inside enclave. The untrusted library functions can only be called from application code - outside the enclave. Linking the enclave with any untrusted library either fail the enclave signing process or cause a runtime failure due to the use of restricted instructions.

You can refer to below document for more information on trusted/untrsusted libraries and linking application with the untrusted libraries.

https://download.01.org/intel-sgx/linux-1.8/docs/Intel_SGX_SDK_Developer_Reference_Linux_1.8_Open_Source.pdf

Regards

Shivananda

Thanks Shivananda

you_w_ — Fri, 30 Jun 2017 10:16:18 GMT

Thanks Shivananda

I think if I can static link the untrusted library function into enclave successfully, I can used it. I my case, I want to use the MKL library function in enclave because one of the parameter is defined as secret and should not be bring out from enclave. Now I use an ecall get the parameter and destroy it immediately。

Regards

youwanlong