SGX enclaves and sockets

[X99]

Hi.

Someone told me that it's impossible to create/use sockets from within an enclave.

However, I did not found any resources explaining this limitation. On reflection, it might be because of kernel issues due to the fact that the enclave's code/data is fully encrypted?

Thanks for your enlightenment.

[JesusG_Intel · Accepted solution]

Hello X99,

Enclaves cannot use sockets because enclaves rely on the untrusted application that loads the enclave to communicate with external components. Enclaves cannot create independent communication channels to outside entities. This would break their security and trust model.

Sincerely,

Jesus G.

Intel Customer Support

[JesusG_Intel]

This thread has been marked as answered and Intel will no longer monitor this thread. If you want a response from Intel in a follow-up question, please open a new thread.