topic Hi, in Intel® Software Guard Extensions (Intel® SGX)

SGX Host application multiple enclave

ciraci__nicolo — Thu, 11 Jan 2018 15:33:43 GMT

Hi,

can an application have two separate enclaves? Each running their code in separate concurrent threads? Furthermore, can this two enclave share a variable or the only communication way is LocalAttestation/Seal Data?

Hi,

Rodolfo_S_ — Tue, 16 Jan 2018 22:52:49 GMT

Hi,

for the first two questions, the answer is yes. As for the last one, this would go against the purpose of SGX, which is to provide enclaves that are completely isolated from anything else. Therefore, no.

Regards,

Rodolfo

Running multiple enclaves in

Hoang_N_Intel — Thu, 18 Jan 2018 06:54:28 GMT

Running multiple enclaves in an application is definitely available but please remember that Enclave resource is limited and there is performance implication.

If you want to share a secret between two enclaves, you need to build a secure channel between them. A common technique is s leverage Diffie Hellman key exchange protocol to build one.