topic About IntelSGX in Intel® Software Guard Extensions (Intel® SGX)

About IntelSGX

Kelvin_C_ — Wed, 06 Dec 2017 02:19:02 GMT

1. Can we strictly turn the Intel SGX on dynamically?

2. Can we develop a SGX as third party service for application

3. Can we develop and take an advantage without Intel SGX sdk?

Kelvin,

Thanks.

Hi,

Rodolfo_S_ — Wed, 06 Dec 2017 02:40:47 GMT

Hi, 1. No. The PRM is allocated at boot time. Therefore, switching SGX on/off requires a reboot. 2. It is not clear to me what you mean by that. Can you clarify? 3. Yes. You will still need a driver in order to use SGX capabilities, but it is completely possible to use SGX without the SDK. Regards, Rodolfo

Hi Rodolfo,

Kelvin_C_ — Wed, 06 Dec 2017 03:15:10 GMT

Hi Rodolfo,

Thanks for your answering.

For the second question, sorry about it is quite confusing.

I try to clarify my ideas:

I mean , can we isolated the protected target and Intel SGX module?

For example, like online-gaming, we wanna to protect some memory address, it only can be read by game itself.

But we are not able to re-compile the game, so that we may make a DLL and Driver (pair) as a security service to it.

Is it a possible planning ?

Kelvin