topic Hi Muthu, in Intel® Software Guard Extensions (Intel® SGX)

Use SGX to pack non-SGX lib

KT_L_ — Wed, 27 Jul 2016 14:18:32 GMT

Hi..

I have a SGX question

If I got a algorithm lib/dll whcih is non-SGX coding and I don't have the source code.

I plan to write a SGX function and call this non-SGX API lib.

Is non-SGX lib protected by SGX?

Thanks

Hi KT,

Surenthar_S_Intel — Fri, 29 Jul 2016 04:10:33 GMT

Hi KT,

No, it will not provide any SGX security for non SGX lib. Because the non SGX lib stored on untrusted memory.

Thanks and Reagrds,
Surenthar Selvaraj

Hi Surenthar

KT_L_ — Mon, 01 Aug 2016 02:29:42 GMT

Hi Surenthar

Thanks for your reply.

So there are no way to make non-sgx lib be proercted by SGX without re-writing the lib with SGX?

If answer is no, I will ask the vendor whcich provide our algorithm to re-write it under SGX environment.

Someone tell me that ARM; trustzone can do it. That's why we think it maybe ok to wrap the non-sgx lib in SGX code.

Thanks KT

Muthumanic_V_Intel — Tue, 02 Aug 2016 06:24:08 GMT

Hello KT,

The untrusted library functions can only be called from application code - outside the enclave. The trusted libraries are static libraries that link with the enclave binary. The Intel® Software Guard Extensions Evaluation SDK ships with several trusted libraries that cover domains such as standard C/C++ libraries, synchronization, encryption and more. These functions/objects can only be used from within the enclave.

Note: Do not link the enclave with any untrusted library including C/C++ standard libraries. This action will either fail the enclave signing process or cause a runtime failure due to the use of restricted instructions.

In your case please do rewrite the algorithm with in the SXG environment.

Regards,

Muthu

Hi Muthu,

KT_L_ — Thu, 04 Aug 2016 08:40:44 GMT

Hi Muthu,

Thansk for your detail explain. really appreciate.