topic can Enclave link librarys which is not in SDK/include? in Intel® Software Guard Extensions (Intel® SGX)

can Enclave link librarys which is not in SDK/include?

dai_c_ — Tue, 16 Jan 2018 03:19:18 GMT

Hello, I want to use the third-party libraries in enclave,Can I link the third-party static library(.a file) when compile enclave to generate enclave.so?

Yes, and please make sure all

Hoang_N_Intel — Tue, 16 Jan 2018 14:37:31 GMT

Yes, and please make sure all the library's dependencies are also included statically

OK,Thank you very much!

dai_c_ — Wed, 17 Jan 2018 06:52:07 GMT

OK,Thank you very much!

I have created a .h header

Roshan_Mehta — Sun, 21 Jan 2018 14:29:00 GMT

Suppose I have created a (rosheader.h) header file in /home/roshan/mylib/include directory

The static library(roslib.a) in /home/roshan/mylib

I wanted to use this library inside the enclave, what I should I write in my makefile, I mean here:

A snippet of the makefile.

Enclave_Cpp_Files := Enclave/Enclave.cpp Enclave/Sealing/Sealing.cpp
# Enclave_Include_Paths := -IInclude -IEnclave -I$(SGX_SDK)/include -I$(SGX_SDK)/include/tlibc -I$(SGX_SDK)/include/stlport
Enclave_Include_Paths := -IEnclave -I$(SGX_SDK)/include -I$(SGX_SDK)/include/tlibc -I$(SGX_SDK)/include/stlport

Enclave_C_Flags := $(SGX_COMMON_CFLAGS) -nostdinc -fvisibility=hidden -fpie -fstack-protector $(Enclave_Include_Paths)
Enclave_Cpp_Flags := $(Enclave_C_Flags) -std=c++03 -nostdinc++
Enclave_Link_Flags := $(SGX_COMMON_CFLAGS) -Wl,--no-undefined -nostdlib -nodefaultlibs -nostartfiles -L$(SGX_LIBRARY_PATH) \
-Wl,--whole-archive -l$(Trts_Library_Name) -Wl,--no-whole-archive \
-Wl,--start-group -lsgx_tstdc -lsgx_tstdcxx -l$(Crypto_Library_Name) -l$(Service_Library_Name) -Wl,--end-group \
-Wl,-Bstatic -Wl,-Bsymbolic -Wl,--no-undefined \
-Wl,-pie,-eenclave_entry -Wl,--export-dynamic  \
-Wl,--defsym,__ImageBase=0

Hi Roshan:

you_w_ — Mon, 22 Jan 2018 01:58:23 GMT

Hi Roshan:

You can add "-L/home/roshan/mylib" in SGX_COMMON_CFLAGS and then add "-l/roslib.a" after "-Wl,--whole-archive -l$(Trts_Library_Name)". Have a try.

Regards

you

I think you should add

dai_c_ — Mon, 22 Jan 2018 02:03:48 GMT

I think you  should add include path and link flags to use your static lib

Enclave_Include_Paths := -IEnclave -I$(SGX_SDK)/include -I$(SGX_SDK)/include/tlibc -I$(SGX_SDK)/include/stlport -I /home/roshan/mylib/include

and the link flags as follows:

Enclave_Link_Flags := $(SGX_COMMON_CFLAGS) -Wl,--no-undefined -nostdlib -nodefaultlibs -nostartfiles -L$(SGX_LIBRARY_PATH) -L /home/roshan/mylib \
-Wl,--whole-archive -l$(Trts_Library_Name) -Wl,--no-whole-archive \
-Wl,--start-group -lsgx_tstdc -lsgx_tstdcxx -l$(Crypto_Library_Name) -l$(Service_Library_Name) -l roslib -Wl,--end-group \
-Wl,-Bstatic -Wl,-Bsymbolic -Wl,--no-undefined \
-Wl,-pie,-eenclave_entry -Wl,--export-dynamic  \
-Wl,--defsym,__ImageBase=0 \
-Wl,--version-script=Enclave/Enclave.lds

Quote:Hoang Nguyen (Intel)

dai_c_ — Tue, 23 Jan 2018 07:52:17 GMT

Hoang Nguyen (Intel) wrote:

Yes, and please make sure all the library's dependencies are also included statically

Hello,when I want to use SGX to protect a part of project, if I move the code in enclave,the workload is heavy,and can I compile the part code into static lib,and my enclave link the static lib,can this way achieves the same goal as move the code in enclave?