Can I create another enclave in an enclave? - Intel Community

Intel® Software Guard Extensions (Intel® SGX)

Discussion board focused on hardware-based isolation and memory encryption to provide extended code protection in solutions.

Can I create another enclave in an enclave?

308 Views

function_in_enclave(eid1) <---- e-called

{

sgx_create_enclave(eid1, ~~~~);

}

Is this possible??

Link Copied

1 Reply

308 Views

Hello.

No, this is not supported. If you need two enclaves, you create them both from the untrusted app and then can use local attestation to communicate between the two if need be.

Regards.

Scott

Copy link

Community support is provided during standard business hours (Monday to Friday 7AM - 5PM PST). Other contact methods are available here.

Intel does not verify all solutions, including but not limited to any file transfers that may appear in this community. Accordingly, Intel disclaims all express and implied warranties, including without limitation, the implied warranties of merchantability, fitness for a particular purpose, and non-infringement, as well as any warranty arising from course of performance, course of dealing, or usage in trade.

For more complete information about compiler optimizations, see our Optimization Notice.