Intel® Software Guard Extensions (Intel® SGX)
Use hardware-based isolation and memory encryption to provide more code protection in your solutions.

Examples loading enclave from buffer?

Daniel_ˢᵍˣ
New Contributor I
329 Views

Any examples available using sgx_create_enclave_from_buffer_ex and invoking ecalls and ocalls of the loaded enclave?

Labels (1)
0 Kudos
1 Solution
Sahira_Intel
Moderator
271 Views

Hi,

While there are no samples using that function included in the SGX SDK, I am sending you a patch to convert SampleEnclave which uses sgx_create_enclave to sgx_create_enclave_from_buffer_ex (the file type is not supported so I am sending you a PM of it)

You can apply it to the linux-sgx repo. 

 

Sincerely,

Sahira

 

 

View solution in original post

4 Replies
Sahira_Intel
Moderator
272 Views

Hi,

While there are no samples using that function included in the SGX SDK, I am sending you a patch to convert SampleEnclave which uses sgx_create_enclave to sgx_create_enclave_from_buffer_ex (the file type is not supported so I am sending you a PM of it)

You can apply it to the linux-sgx repo. 

 

Sincerely,

Sahira

 

 

Daniel_ˢᵍˣ
New Contributor I
202 Views

Thank you Sahira, the patched example worked.

 

A related question:

In terms of security, is there an advantage in using mmap instead of reading the enclave into a buffer and using that buffer as input to sgx_create_enclave_from_buffer_ex

 

¹ I created a hello world where the enclave is read into a buffer (fopen + fread) instead of using mmap and it appears to work as well.

Daniel_ˢᵍˣ
New Contributor I
242 Views

Hello,

The patched sample worked, thank you.

 

A related question:

In terms of security, is there an advantage in using mmap instead of reading the enclave into a buffer (fopen + fread) and using that buffer in sgx_create_enclave_from_buffer_ex?

Sahira_Intel
Moderator
195 Views

Hi,

It is technically faster. sgx_create_enclave_from_buffer_ex can be used without mmap if the user already has the enclave image buffer.

Sincerely,

Sahira

 

Reply