Intel® Software Guard Extensions (Intel® SGX)
Use hardware-based isolation and memory encryption to provide more code protection in your solutions.

SGX SDK 1.7 - Enclave Sign error

Douglas_A_
Beginner
178 Views

I downloaded the last SDK in my work computer (non-SGX) and tried to run one of the samples codes that comes with, but i got an error when the Makefile tries to sign the enclave...

<EnclaveConfiguration>
    <ProdID>0</ProdID>
    <ISVSVN>0</ISVSVN>
    <StackMaxSize>0x40000</StackMaxSize>
    <HeapMaxSize>0x100000</HeapMaxSize>
    <TCSNum>10</TCSNum>
    <TCSPolicy>1</TCSPolicy>
    <DisableDebug>0</DisableDebug>
    <MiscSelect>0</MiscSelect>
    <MiscMask>0xFFFFFFFF</MiscMask>
</EnclaveConfiguration>
make: *** [enclave.signed.so] Illegal instruction (core dumped)
make: *** Deleting file `enclave.signed.so'

then i used sgx_sign tool directly from SDK hoping that it would work, but again I got an error..

sudo /opt/intel/sgxsdk/bin/x64/sgx_sign sign -key Enclave/Enclave_private.pem -enclave Enclave -out enclave.signed.so -config Enclave/Enclave.config.xml


<EnclaveConfiguration>
    <ProdID>0</ProdID>
    <ISVSVN>0</ISVSVN>
    <StackMaxSize>0x40000</StackMaxSize>
    <HeapMaxSize>0x100000</HeapMaxSize>
    <TCSNum>10</TCSNum>
    <TCSPolicy>1</TCSPolicy>
    <DisableDebug>0</DisableDebug>
    <MiscSelect>0</MiscSelect>
    <MiscMask>0xFFFFFFFF</MiscMask>
</EnclaveConfiguration>
Error happened while signing the enclave.

After spending hours trying to fix this I switched back to "1.6" and everything works okay. Any ideas about this problem?

0 Kudos
1 Reply
Francisco_C_Intel
178 Views

Can you provide more details regarding the processor on the system that was used? It will help determine which illegal instruction was being executed. You could try to debug the signing process too and GDB may tell you which (non-supported) instruction is being executed.

 

Thanks

Reply