topic Re: Examples loading enclave from buffer? in Intel® Software Guard Extensions (Intel® SGX)

Examples loading enclave from buffer?

Daniel_ˢᵍˣ — Thu, 28 Jul 2022 13:12:15 GMT

Any examples available using sgx_create_enclave_from_buffer_ex and invoking ecalls and ocalls of the loaded enclave?

Re: Examples loading enclave from buffer?

Sahira_Intel — Tue, 02 Aug 2022 19:02:06 GMT

Hi,

While there are no samples using that function included in the SGX SDK, I am sending you a patch to convert SampleEnclave which uses sgx_create_enclave to sgx_create_enclave_from_buffer_ex (the file type is not supported so I am sending you a PM of it)

You can apply it to the linux-sgx repo.

Sincerely,

Sahira

Re: Examples loading enclave from buffer?

Daniel_ˢᵍˣ — Fri, 05 Aug 2022 17:39:04 GMT

Thank you Sahira, the patched example worked.

A related question:

In terms of security, is there an advantage in using mmap instead of reading the enclave into a buffer and using that buffer as input to sgx_create_enclave_from_buffer_ex?¹

¹ I created a hello world where the enclave is read into a buffer (fopen + fread) instead of using mmap and it appears to work as well.

Re: Examples loading enclave from buffer?

Daniel_ˢᵍˣ — Fri, 05 Aug 2022 17:47:50 GMT

Hello,

The patched sample worked, thank you.

A related question:

In terms of security, is there an advantage in using mmap instead of reading the enclave into a buffer (fopen + fread) and using that buffer in sgx_create_enclave_from_buffer_ex?

Re: Examples loading enclave from buffer?

Sahira_Intel — Tue, 16 Aug 2022 23:40:13 GMT

Hi,

It is technically faster. sgx_create_enclave_from_buffer_ex can be used without mmap if the user already has the enclave image buffer.

Sincerely,

Sahira