Community
cancel
Showing results for 
Search instead for 
Did you mean: 
SAM_R_2
Beginner
116 Views

EINT Token

Jump to solution

Hi,

How to prepare the EINIT Token in SGX? Could you please explain in details?

-Thanks

0 Kudos
1 Solution
116 Views

Hi Sam,

In the SGX spec, Intel will need to provide an Intel-signed launch enclave to make SGX usable. This enclave will use EGETKEY to acquire the launch key for that processor and sign enclaves to allow them to run there. If that launch enclave isn't trying to enforce any particular policy about what enclaves can and can't run, it's actually a trivial piece of code. A basic launch enclave only requires user/enclave calling convention and an enclave CMAC implementation, both of which are simple and fundamental to any useful SGX implementation.

Thanks and Regards,
Surenthar Selvaraj

View solution in original post

4 Replies
117 Views

Hi Sam,

In the SGX spec, Intel will need to provide an Intel-signed launch enclave to make SGX usable. This enclave will use EGETKEY to acquire the launch key for that processor and sign enclaves to allow them to run there. If that launch enclave isn't trying to enforce any particular policy about what enclaves can and can't run, it's actually a trivial piece of code. A basic launch enclave only requires user/enclave calling convention and an enclave CMAC implementation, both of which are simple and fundamental to any useful SGX implementation.

Thanks and Regards,
Surenthar Selvaraj

View solution in original post

SAM_R_2
Beginner
116 Views

Thanks for your detailed info....

Ofir_W_
Beginner
116 Views

Hello Surenthar,

I in understand right, and after looking at the open source launch enclave provided in the SDK, the provided launch enclave makes sure the user enclave is signed with a white listed key. Is it possible for me to get a Intel-signed launch enclave that lets every enclave run? It would be extremely useful for me in order to run enclaves just on my machine, in non-debug mode.

Where can I get such Intel-signed allow-all launch enclave?

 

Thanks!

Ofir

116 Views

Hi,

For testing remote attestation, Sandbox is available for testing purpose Goto : https://software.intel.com/formfill/sgx-onboardingThis link is available from the SGX landing zone (software.intel.com/sgx). Go to “Resource Library” and then select “Access Development Services” from the sidebar.

-Surenthar

Reply