topic Hi Sushant. in Intel® Software Guard Extensions (Intel® SGX)

multiple enclaves in a single application

Gokhale__Sushant — Sun, 27 Jan 2019 11:08:35 GMT

How to create multiple enclaves in a single application?

Sample code(or link to it ) would be better. Need it for my academic project.

Hi Sushant.

Scott_R_Intel — Mon, 28 Jan 2019 12:08:35 GMT

Hi Sushant.

The only thing you really need to do to load multiple enclaves is to make sure they are named differently. The LocalAttestation sample actually loads up 3 different enclaves (simply named Enclave1, Enclave2, and Enclave3).

https://github.com/intel/linux-sgx/tree/master/SampleCode/LocalAttestation

Hope this helps.

Scott

Thanks. And how do you

Gokhale__Sushant — Mon, 28 Jan 2019 12:33:06 GMT

Thanks. And how do you generate "Enclave1_private.pem" file for each enclave?

You can use OpenSSL to

Scott_R_Intel — Mon, 28 Jan 2019 12:53:46 GMT

You can use OpenSSL to generate the keys you need. See the "Enclave Signing Tool" section of the latest SGX Dev Ref for Linux for examples of how to do so:

https://download.01.org/intel-sgx/linux-2.4/docs/Intel_SGX_Developer_Reference_Linux_2.4_Open_Source.pdf

But, just as an FYI, unless you want/plan to whitelist each enclave signing key separately, you probably want to use the same signing key for all your enclaves.

Regards.

Scott