topic Re:Protected File System Library in Intel® Software Guard Extensions (Intel® SGX)

Protected File System Library

yg1 — Tue, 20 Jul 2021 12:11:11 GMT

Hi,
I'm using Intel protected file system library. When I create a file using sgx_fopen_auto_key(), where is it exactly getting stored, and how can I locate it in the untrusted part?
Also, is it possible to get the path of the file?

Thanks.

Re:Protected File System Library

JesusG_Intel — Tue, 20 Jul 2021 18:28:46 GMT

Hello Yg1,

The declaration of sgx_fopen_auto_key is:

sgx_fopen_auto_key

The sgx_fopen_auto_key function creates or opens a protected file.

Syntax

SGX_FILE* sgx_fopen_auto_key(

const char* filename,

const char* mode

);

Parameters

filename [in]

The name of the file to be created or opened.

You specify the file path, which is where the file is located, in the first argument, const char* filename. The API for sgx_fopen behaves like its counterpart in C, fopen.

The protected file cannot be opened for reading or writing by the untrusted application since the file is encrypted with an enclave sealing key. The section Intel® Protected File System Library in the SGX Developer Reference Guide has more details.

Related Information:

Overview of Intel® Protected File System.
IntelProtectedFileSystem_Reference.pdf
Intel SGX SDK Developer Reference Guide for Windows
The Intel SGX Developer Reference for Linux is in the Documentation folder of the latest release of the Intel® Software Guard Extensions SDK for Linux.*

Sincerely,

Jesus G.

Intel Customer Support

Re: Protected File System Library

yg1 — Wed, 21 Jul 2021 06:10:16 GMT

Hello Jesus,

Thanks for your information, but should I need to take backup of the file created by sgx_fopen_auto_key function, so where can I find the file content?

Re:Protected File System Library

JesusG_Intel — Wed, 21 Jul 2021 15:19:43 GMT

Hello Yg1,

You specify the location of the file in the filepath argument: const char* filename.

If you don't specify a full path, the file will be created in the same directory where your app is executed.

Sincerely,

Jesus G.

Intel Customer Support

Re:Protected File System Library

JesusG_Intel — Fri, 23 Jul 2021 17:20:04 GMT

This thread has been marked as answered and Intel will no longer monitor this thread. If you want a response from Intel in a follow-up question, please open a new thread.