We have some Python programs that may prove difficult to rewrite in another language, but they contain a number of algorithms and data we would like to protect within something like the SGX enclave. Assuming limited rewrites such that the Python code that needs protection is not making system calls and doing everything in memory, can a C program compiled with the Python interpreter and Python modules run in an SGX enclave? What would be the caveats to doing so? Some references that cause me to consider this are:
"Embedding Python in Your C Programs" (https://www.linuxjournal.com/article/8497)
"Calling Python Functions from C" (https://docs.python.org/2.5/ext/callingPython.html)
On the flip side, to limit rewrites of Python code, is there any reason I can't call an untrusted C program from a Python program in order to launch C-enclave modules into the SGX enclave?
