Can enclave refuse to be evicted from EPC?

Intel® Software Guard Extensions (Intel® SGX)

Discussion board focused on hardware-based isolation and memory encryption to provide extended code protection in solutions.

Can enclave refuse to be evicted from EPC?

315 Views

I m now researching on the SGX, especially the eviction of EPC.

I think it is hard to completely trust the main memory under the untrusted OS environment.

Actually, if the EPC is evicted by untrusted OS, it will be stored in system memory.

And although it has confidentiality, integrity verification scheme, But what happens if malware undiscriminatingly remove that Enclave Page on system memory?

Isn't it dangerous? Then, is there other way to protects enclave from being evicted?

Link Copied

0 Replies

Community support is provided during standard business hours (Monday to Friday 7AM - 5PM PST). Other contact methods are available here.

Intel does not verify all solutions, including but not limited to any file transfers that may appear in this community. Accordingly, Intel disclaims all express and implied warranties, including without limitation, the implied warranties of merchantability, fitness for a particular purpose, and non-infringement, as well as any warranty arising from course of performance, course of dealing, or usage in trade.

For more complete information about compiler optimizations, see our Optimization Notice.