topic Re:How Intel support 1 Terabyte enclave size? in Intel® Software Guard Extensions (Intel® SGX)

How Intel support 1 Terabyte enclave size?

Mingyi — Thu, 17 Jun 2021 13:04:40 GMT

Hello,

I've seen that Xeon Ice Lake CPU supports up to 1 Terabyte enclave much larger than original 256 Megabytes.

I would you like to know how Intel support that huge size? Are there any significant changes? I'd appreciate it if you may share any documents or give me a few pointers on where I could get more information regarding this problem.

Hope you well.

Regards,

Mingyi

Re:How Intel support 1 Terabyte enclave size?

JesusG_Intel — Thu, 17 Jun 2021 19:11:00 GMT

Hello Mingyi,

The main change that enabled is a larger EPC is that SGX went from using the Memory Encryption Engine (MEE), which uses on-die space for a Merkle Tree (which doesn’t expand easily), to using AES-XTS. This paper provides much more detail: https://www.intel.com/content/dam/www/public/us/en/documents/white-papers/supporting-intel-sgx-on-mulit-socket-platforms.pdf

This link says a bit about it also:

https://www.intel.com/content/www/us/en/newsroom/news/xeon-scalable-platform-built-sensitive-workloads.html#gs.3l58dx

To clarify, that’s 1TB for a 2 socket system; max per CPU is 512GB.

Sincerely,

Jesus G.

Intel Customer Support

Re: Re:How Intel support 1 Terabyte enclave size?

Mingyi — Fri, 18 Jun 2021 01:07:25 GMT

Thanks Jesus!

Re:How Intel support 1 Terabyte enclave size?

JesusG_Intel — Fri, 18 Jun 2021 20:51:07 GMT

This thread has been marked as answered and Intel will no longer monitor this thread. If you want a response from Intel in a follow-up question, please open a new thread.