Does SGX Support Stream Cipher or Iterative Encryption/Decryption?

Intel® Software Guard Extensions (Intel® SGX)

Discussion board focused on hardware-based isolation and memory encryption to provide extended code protection in solutions.

Does SGX Support Stream Cipher or Iterative Encryption/Decryption?

380 Views

Hi!

I'm trying to encrypt and decrypt large chunk of data (>1G), which might not be able to fit in an Enclave's secure memory space.

I've noticed that AES-GCM in SGX SDK supports iterative encryption, but I guess that is not enough since it doesn't seem to support iterative decryption. (Well I don't think essentially AES-GCM can decrypt iteratively.)

So far what I can think of is partitioning the data into blocks, encrypt ->process->decrypt each block separately. But I'm wondering if other solutions are also possible.

So Could you help me figure out (1) if SGX supports stream cipher, or (2) is there some other ways in SGX that can encrypt and decrypt large chunks of data iteratively, and (3) overall what should I do in SGX in generally when handling large chunk of data?

Thank you!

Link Copied

0 Replies

Community support is provided during standard business hours (Monday to Friday 7AM - 5PM PST). Other contact methods are available here.

Intel does not verify all solutions, including but not limited to any file transfers that may appear in this community. Accordingly, Intel disclaims all express and implied warranties, including without limitation, the implied warranties of merchantability, fitness for a particular purpose, and non-infringement, as well as any warranty arising from course of performance, course of dealing, or usage in trade.

For more complete information about compiler optimizations, see our Optimization Notice.