multiple enclaves in a single application

[Gokhale__Sushant]

How to create multiple enclaves in a single application?

Sample code(or link to it ) would be better. Need it for my academic project.

[Scott_R_Intel · Accepted solution]

Hi Sushant.

The only thing you really need to do to load multiple enclaves is to make sure they are named differently.  The LocalAttestation sample actually loads up 3 different enclaves (simply named Enclave1, Enclave2, and Enclave3).

https://github.com/intel/linux-sgx/tree/master/SampleCode/LocalAttestation

Hope this helps.

Scott

[Gokhale__Sushant]

Thanks. And how do you generate "Enclave1_private.pem" file for each enclave?

[Scott_R_Intel]

You can use OpenSSL to generate the keys you need.  See the "Enclave Signing Tool" section of the latest SGX Dev Ref for Linux for examples of how to do so:

https://download.01.org/intel-sgx/linux-2.4/docs/Intel_SGX_Developer_Reference_Linux_2.4_Open_Source.pdf

But, just as an FYI, unless you want/plan to whitelist each enclave signing key separately, you probably want to use the same signing key for all your enclaves.

Regards.

Scott