topic Thanks a lot You. W. in Intel® Software Guard Extensions (Intel® SGX)

Protected File System for Linux SDK

Nazmus_S_ — Thu, 27 Jul 2017 02:54:00 GMT

Hi,

As far as I know, at first, Protected File System (FS) feature came with Windows SDk 1.7. At that time, this feature was unavailable in Linux SDK.

Recently, I checked the Linux SDK 1.9 release note and found the following statement under What's New section:

"Support for Protected File System – a basic subset of the regular ‘C’ file API for Intel SGX enclaves that provides files with both confidentiality and integrity protection ".

Apparently, Linux SDK 1.9 offers protected FS feature. If so, is there any sample project available?

I am aware that, for Windows SDK, there is a sample project here: https://software.intel.com/en-us/articles/overview-of-intel-protected-file-system-library-using-software-guard-extensions

Hi

Shivananda_H_Intel — Thu, 27 Jul 2017 11:29:57 GMT

Currently we do not have sgx-linux sample project demonstrating protect filesystem API's .

Regards

Shivananda

Hi Shivananda,

Nazmus_S_ — Thu, 27 Jul 2017 17:34:58 GMT

Hi Shivananda,

Thanks for the update.

Hi Nazmus S

you_w_ — Fri, 28 Jul 2017 05:57:37 GMT

Hi Nazmus S

I just write a demo which does the same thing as the demo you mentioned. If you need find it here .https://github.com/light1021/SGX-protected-fs-demo

Regards

you

Thanks a lot You. W.

Nazmus_S_ — Fri, 28 Jul 2017 06:24:01 GMT

Thanks a lot You. W.

I am looking into it. Very useful.

Nazmus

Hi Nazmus S:

you_w_ — Mon, 31 Jul 2017 01:15:29 GMT

Hi Nazmus S:

I am glad if this demo is helpful. The read function is a little different to the windows demo. I use "[count=size]" instead of "[string]", because when I use string as the windows demo, I always get the wrong content in untrusted code.

Regards

you