https://community.intel.com/t5/Intel-Confidential-Computing/Wrapping-Python-Interpreter-in-C-to-Run-Python-modules-in/m-p/1155662#M2734 <P>We have some Python programs that may prove difficult to rewrite in another language, but they contain a number of algorithms and data we would like to protect within something like the SGX enclave.&nbsp; Assuming limited rewrites such that the Python code that needs protection is not making system calls and doing everything in memory, can a C program compiled with the Python interpreter and Python modules run in an SGX enclave?&nbsp; What would be the caveats to doing so?&nbsp; Some references that cause me to consider this are:</P><P>"Embedding Python in Your C Programs" (https://www.linuxjournal.com/article/8497)</P><P>"Calling Python Functions from C" (https://docs.python.org/2.5/ext/callingPython.html)</P><P>On the flip side, to limit rewrites of Python code, is there any reason I can't call an untrusted C program from a Python program in order to launch C-enclave modules into the SGX enclave?</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Fri, 09 Nov 2018 18:19:53 GMT Harris__David 2018-11-09T18:19:53Z https://community.intel.com/t5/Intel-Confidential-Computing/Wrapping-Python-Interpreter-in-C-to-Run-Python-modules-in/m-p/1155662#M2734 <P>We have some Python programs that may prove difficult to rewrite in another language, but they contain a number of algorithms and data we would like to protect within something like the SGX enclave.&nbsp; Assuming limited rewrites such that the Python code that needs protection is not making system calls and doing everything in memory, can a C program compiled with the Python interpreter and Python modules run in an SGX enclave?&nbsp; What would be the caveats to doing so?&nbsp; Some references that cause me to consider this are:</P><P>"Embedding Python in Your C Programs" (https://www.linuxjournal.com/article/8497)</P><P>"Calling Python Functions from C" (https://docs.python.org/2.5/ext/callingPython.html)</P><P>On the flip side, to limit rewrites of Python code, is there any reason I can't call an untrusted C program from a Python program in order to launch C-enclave modules into the SGX enclave?</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Fri, 09 Nov 2018 18:19:53 GMT https://community.intel.com/t5/Intel-Confidential-Computing/Wrapping-Python-Interpreter-in-C-to-Run-Python-modules-in/m-p/1155662#M2734 Harris__David 2018-11-09T18:19:53Z