Intel® Software Guard Extensions (Intel® SGX)
Discussion board focused on hardware-based isolation and memory encryption to provide extended code protection in solutions.

SGX SDK 1.7 - Enclave Sign error

Douglas_A_
Beginner
732 Views

I downloaded the last SDK in my work computer (non-SGX) and tried to run one of the samples codes that comes with, but i got an error when the Makefile tries to sign the enclave...

<EnclaveConfiguration>
    <ProdID>0</ProdID>
    <ISVSVN>0</ISVSVN>
    <StackMaxSize>0x40000</StackMaxSize>
    <HeapMaxSize>0x100000</HeapMaxSize>
    <TCSNum>10</TCSNum>
    <TCSPolicy>1</TCSPolicy>
    <DisableDebug>0</DisableDebug>
    <MiscSelect>0</MiscSelect>
    <MiscMask>0xFFFFFFFF</MiscMask>
</EnclaveConfiguration>
make: *** [enclave.signed.so] Illegal instruction (core dumped)
make: *** Deleting file `enclave.signed.so'

then i used sgx_sign tool directly from SDK hoping that it would work, but again I got an error..

sudo /opt/intel/sgxsdk/bin/x64/sgx_sign sign -key Enclave/Enclave_private.pem -enclave Enclave -out enclave.signed.so -config Enclave/Enclave.config.xml


<EnclaveConfiguration>
    <ProdID>0</ProdID>
    <ISVSVN>0</ISVSVN>
    <StackMaxSize>0x40000</StackMaxSize>
    <HeapMaxSize>0x100000</HeapMaxSize>
    <TCSNum>10</TCSNum>
    <TCSPolicy>1</TCSPolicy>
    <DisableDebug>0</DisableDebug>
    <MiscSelect>0</MiscSelect>
    <MiscMask>0xFFFFFFFF</MiscMask>
</EnclaveConfiguration>
Error happened while signing the enclave.

After spending hours trying to fix this I switched back to "1.6" and everything works okay. Any ideas about this problem?

0 Kudos
1 Reply
Francisco_C_Intel
732 Views

Can you provide more details regarding the processor on the system that was used? It will help determine which illegal instruction was being executed. You could try to debug the signing process too and GDB may tell you which (non-supported) instruction is being executed.

 

Thanks

0 Kudos
Reply