Documentation of sgx_aes_ctr_decrypt ( https://software.intel.com/en-us/node/696625 ) says "It is recommended that the source, destination and counter data buffers are allocated within the enclave."
So is it recommended or necessary? What happens if we pass pointer to buffer allocated outside of enclave to sgx_aes_ctr_decrypt? ie pointer passed as an user_check attribute to ECall.
Buffers do not need to be inside the enclave. But there are obvious security consequences for doing so. For decrypt you most likely want your destination buffer inside the enclave. Leaving the source outside the enclave can prevents a copy being required. Vice versa for the encrypt operation.
