About IntelSGX

[Kelvin_C_]

1. Can we strictly turn the Intel SGX on dynamically?

2. Can we develop a SGX as third party service for application

3. Can we develop and take an advantage without Intel SGX sdk?

Kelvin,

Thanks.

[Rodolfo_S_]

Hi, 1. No. The PRM is allocated at boot time. Therefore, switching SGX on/off requires a reboot. 2. It is not clear to me what you mean by that. Can you clarify? 3. Yes. You will still need a driver in order to use SGX capabilities, but it is completely possible to use SGX without the SDK. Regards, Rodolfo

[Kelvin_C_]

Hi Rodolfo,

Thanks for your answering.

For the second question, sorry about it is quite confusing.

I try to clarify my ideas:

I mean , can we isolated the protected target and Intel SGX module?

For example, like online-gaming, we wanna to protect some memory address, it only can be read by game itself.

But we are not able to re-compile the game, so that we may make a DLL and Driver (pair) as a security service to it.

Is it a possible planning ?

Kelvin