topic Integrity Tree and EPC in Intel® Software Guard Extensions (Intel® SGX)

Integrity Tree and EPC

Kumar__Dixit — Mon, 27 Apr 2020 16:17:54 GMT

Does Integrity tree stores in the EPC, or outside the EPC?

Hello Dixit,

JesusG_Intel — Tue, 28 Apr 2020 00:06:48 GMT

Hello Dixit,

The MEE's integrity tree does not reside in the EPC. A small part of the tree resides on the processor die, and most of it resides in a seized area of DRAM. Please see this paper for an in-depth description of the MEE.

Regards,

Jesus

Hello Jesus,

Kumar__Dixit — Tue, 28 Apr 2020 08:14:40 GMT

Hello Jesus,

Thanks for your quick reply.

Now, I understood that most of the MEE's integrity tree portion resides in the Processor Reserved Memory region (seized) outside the EPC.

In addition to this thread, I have one more question.

Q. Other than holding the EPC and enclave metadata like (MEE's integrity tree), What are the other use-case of PRM?

Regards,

Dixit

Hello Dixit,

JesusG_Intel — Tue, 28 Apr 2020 16:37:01 GMT

Hello Dixit,

There are no other uses of the PRM. You have described it all.

Regards,

Jesus