topic Re: Re:Number of Available Memory Encryption Engine for Multi Cores Single Server in Intel® Software Guard Extensions (Intel® SGX)

Number of Available Memory Encryption Engine for Multi Cores Single Server

Sean_ — Sat, 19 Aug 2023 09:59:35 GMT

Hi,

I wonder for single server with multi cpus and logical cores, if there are ONLY ONE memory encryption engine hardware on the server?

In that case, if I run multiple enclaves on the same server, the programs of the many enclaves need to wait for the recourse of the ONLY memory encryption engine hardware to do address translation, decryption, etc?

For a multi-cpu and multi-core server, does it have SGX hardware on each chip, or all cpus share a only one SGX hardware?

Thank you very much.

Best,

-Sean.

Re:Number of Available Memory Encryption Engine for Multi Cores Single Server

Wan_Intel — Tue, 22 Aug 2023 04:46:23 GMT

Hello Sean_,

Thanks for reaching out to us.

Let me check with relevant team and I'll update here at the earliest.

Regards,

Wam

Re:Number of Available Memory Encryption Engine for Multi Cores Single Server

Wan_Intel — Wed, 23 Aug 2023 23:54:34 GMT

Hello Sean_,

Thanks for your patience.

We've received feedback from relevant team.

For a multi-cpu, multi-core server, each CPU has its own set of hardware resources. i.e. each CPU would have its own SGX hardware including the memory encryption engine (MEE).

SGX is designed to provide enclave-based security for each core so that enclaves are secure even in a multi-CPU multi-core environment. So the resources are not shared among the CPUs.

Regards,

Wan

Re: Re:Number of Available Memory Encryption Engine for Multi Cores Single Server

Sean_ — Tue, 29 Aug 2023 01:36:46 GMT

Hello Wan,

Thanks for your reply!

One last thing to comfirm --- does your answer also applies for Azure Virtual Machine (e.g., DC8ds_v3)? I.e., Each vCPU of DC8ds_v3 has its own set of SGX Intel Hardware?

Best,

-Xian

Re: Re:Number of Available Memory Encryption Engine for Multi Cores Single Server

Sean_ — Tue, 29 Aug 2023 01:45:10 GMT

I just find that here is Intel SGX community... I am sorry. Wan, thanks for your previous answer!

Re:Number of Available Memory Encryption Engine for Multi Cores Single Server

Wan_Intel — Thu, 31 Aug 2023 02:34:44 GMT

Hello Sean_,

Thanks for your question.

If you need additional information from Intel, please submit a new question as this thread will no longer be monitored.

Regards,

Wan