Intel® Software Guard Extensions (Intel® SGX)
Use hardware-based isolation and memory encryption to provide more code protection in your solutions.
1266 Discussions

Wrapping Python Interpreter in C to Run Python modules in Enclave?

Harris__David
Beginner
279 Views

We have some Python programs that may prove difficult to rewrite in another language, but they contain a number of algorithms and data we would like to protect within something like the SGX enclave.  Assuming limited rewrites such that the Python code that needs protection is not making system calls and doing everything in memory, can a C program compiled with the Python interpreter and Python modules run in an SGX enclave?  What would be the caveats to doing so?  Some references that cause me to consider this are:

"Embedding Python in Your C Programs" (https://www.linuxjournal.com/article/8497)

"Calling Python Functions from C" (https://docs.python.org/2.5/ext/callingPython.html)

On the flip side, to limit rewrites of Python code, is there any reason I can't call an untrusted C program from a Python program in order to launch C-enclave modules into the SGX enclave?

 

 

 

 

0 Kudos
0 Replies
Reply