How to Protect images and files using SGX

[Sam5]

Hi,

Is it possible to use file descriptor for any kind of file operation and carrying the image from one system to another via SGX?

-Thanks

[Surenthar_S_Intel · Accepted solution]

Hi Sam,

For file i/O operations, you need to define file I/O APIs as OCALLs in the EDL file and include additional declarations in a header file, which can be included in the EDL file. If you want to carry image/files from one machine to another, you cannot use the sealing API that the SGX provides. Instead, enclaves running on both machines need to agreed on a shared key or have a key provisioned by a 3rd party.

-Surenthar

[Sam5]

Thanks for you detailed Information