Intel® Software Guard Extensions (Intel® SGX)
Discussion board focused on hardware-based isolation and memory encryption to provide extended code protection in solutions.
1480 Discussions

Security issues regarding calling untrusted functions in non secure areas

dongconse
Beginner
‎09-08-2024 12:15 AM
305 Views

Hi，

  In the enclave, only trusted functions from the trusted library can be called. However, if there are necessary operations that cannot be provided by the trusted library, I must call the Ocall function to execute them in the non secure area.

  Is there a risk of leakage for the parameters I pass to the Ocall function?

  What measures can I take to improve its security?

0 Kudos

Link Copied

1 Reply
dongconse
Beginner
‎09-09-2024 11:34 PM
231 Views

  If I want to call OpenCV library functions to obtain images, but the OpenCV library is an untrusted library, I need to call the Ocall function to run the OpenCV library functions in the untrusted area. In addition, the obtained files also belong to image format files. How do I protect them?

0 Kudos
Copy link
Reply

Community support is provided Monday to Friday. Other contact methods are available here.

Intel does not verify all solutions, including but not limited to any file transfers that may appear in this community. Accordingly, Intel disclaims all express and implied warranties, including without limitation, the implied warranties of merchantability, fitness for a particular purpose, and non-infringement, as well as any warranty arising from course of performance, course of dealing, or usage in trade.

For more complete information about compiler optimizations, see our Optimization Notice.