- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
I wonder for single server with multi cpus and logical cores, if there are ONLY ONE memory encryption engine hardware on the server?
In that case, if I run multiple enclaves on the same server, the programs of the many enclaves need to wait for the recourse of the ONLY memory encryption engine hardware to do address translation, decryption, etc?
For a multi-cpu and multi-core server, does it have SGX hardware on each chip, or all cpus share a only one SGX hardware?
Thank you very much.
Best,
-Sean.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello Sean_,
Thanks for your patience.
We've received feedback from relevant team.
For a multi-cpu, multi-core server, each CPU has its own set of hardware resources. i.e. each CPU would have its own SGX hardware including the memory encryption engine (MEE).
SGX is designed to provide enclave-based security for each core so that enclaves are secure even in a multi-CPU multi-core environment. So the resources are not shared among the CPUs.
Regards,
Wan
Link Copied
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello Sean_,
Thanks for reaching out to us.
Let me check with relevant team and I'll update here at the earliest.
Regards,
Wam
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello Sean_,
Thanks for your patience.
We've received feedback from relevant team.
For a multi-cpu, multi-core server, each CPU has its own set of hardware resources. i.e. each CPU would have its own SGX hardware including the memory encryption engine (MEE).
SGX is designed to provide enclave-based security for each core so that enclaves are secure even in a multi-CPU multi-core environment. So the resources are not shared among the CPUs.
Regards,
Wan
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello Wan,
Thanks for your reply!
One last thing to comfirm --- does your answer also applies for Azure Virtual Machine (e.g., DC8ds_v3)? I.e., Each vCPU of DC8ds_v3 has its own set of SGX Intel Hardware?
Best,
-Xian
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I just find that here is Intel SGX community... I am sorry. Wan, thanks for your previous answer!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello Sean_,
Thanks for your question.
If you need additional information from Intel, please submit a new question as this thread will no longer be monitored.
Regards,
Wan
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page