Stack Overflow
Stack Overflow

Questions tagged [enclave]

52 questions
12
votes
1 answer

Passing C++ struct to enclave from app in Intel SGX

I have a C++ struct like this: struct node { string splitOn; string label; bool isLeaf; …
Kumar Roshan Mehta
  • 3,078
  • 2
  • 27
  • 50
5
votes
2 answers

How many keys can be stored in the iOS Secure Enclave?

Is there a limit to the number of keys I can store in the iOS Secure Enclave? I have read Apple's documentation about the Secure Enclave (with a lot of associated pages) and also Apple's document about security, but I haven't found anything about…
Martin Žid
  • 289
  • 3
  • 18
3
votes
0 answers

Intel SGX: Creating an attestation report within the enclave

I'm using SCONE Docker image to run my code inside Intel SGX enclave. SCONE handles the creation of enclaves and their eventual destruction, which makes my life as a programmer easier. But if I want to perform a Local or Remote Attestation of my…
Igor
  • 121
  • 1
  • 3
3
votes
1 answer

Difference between SecKeyCreateEncryptedData and SecKeyEncrypt in Swift 3

When trying to encrypt a block of plain data using SecKeyCreateEncryptedData, it encrypts the plain data using the specified algorithm and it works fine.The code snippet which i used for encryption is…
vineeth
  • 41
  • 1
  • 6
3
votes
2 answers

Why in SGX enclave string argument has to be used with [in] attribute

Using OCALL, I want to get a copy of C string that is dynamically created in untrusted memory into my enclave. Thus, I have to use [out, string] attribute. However, I cannot do that because I have to add [in] attribute as well. The problem is that I…
yerzhan7
  • 185
  • 2
  • 14
2
votes
2 answers

AWS Nitro Enclave Socket Connection to Database

I'd like to host an app that uses a database connection in an AWS Nitro enclave. I understand that the Nitro enclave doesn't have access to a network or persistent storage, and the only way that it can communicate with its parent instance is through…
Benji Kok
  • 322
  • 2
  • 4
  • 17
2
votes
1 answer

How to capture the time duration inside an enclave?

Measuring run time is a significant aspect of perfromance evaluation. Now I want to evaluate the performance of several codes inside the SGX enclave (the trusted execution environment), and I noticed the Intel SGX provides an API called…
tuziYou
  • 33
  • 5
2
votes
1 answer

How does a client share a secret with an Intel SGX enclave instance, without letting the server hosting the enclave knowing it?

I am aware that there are SSL libraries available for SGX. But How to establish a secret between the SGX and the clients without letting the host knows it? Trivial methods fail, like: Have a public-private key pair built-in the SGX, then the client…
ssq stone
  • 21
  • 2
2
votes
1 answer

How to make Corda smart contracts to run inside Intel SGX enclaves?

Conclave – a play on enclave – is the name for R3’s research product which hopes to make ‘Enclave oriented computing’ (EoC) accessible to developers. Basically trying to understand how to achieve this
asing177
  • 934
  • 2
  • 13
  • 34
2
votes
1 answer

CreateEnclave VBS Attempt To Access Invalid Address

I'm trying to create a simple Enclave using Hyper-V's Virtualization-based Security that came out last year, however, I'm finding there to be a lack of documentation on MSDN. Due to that, I can't properly diagnose the issue I'm having. Here the code…
Killpot
  • 125
  • 1
  • 9
2
votes
1 answer

Best way to convert 2D vector to C type (for SGX enclave)

I'm trying to write an SGX enclave that takes in a 2D vector of int (representing a grayscale image), but edger8r accepts only C types. I am aware of this and this, but could someone provide an example on how to transform a type like: vector< vector…
asonnino
  • 400
  • 1
  • 4
  • 15
2
votes
1 answer

Loading image into enclave memory

I'm trying to use the new windows 1709 feature that allows to load a DLL into enclave memory. I didn't find ANY documentation or example of doing it. As far as I understand these are the steps to achieve it: Check that VBS (only VBS supports…
AK87
  • 613
  • 6
  • 24
2
votes
3 answers

Load an application into Intel SGX enclave

Is there a way to load an existing application into an Intel SGX enclave directly?
Jinwen Wang
  • 35
  • 3
1
vote
2 answers

http safe call using sgx enclave

I have a situation: I have a scenario that I must connect to a web server and I need to keep the response data safe: I connect to a REST API that will return credit card data. I sign the key in the trusted code and I sent the HTTP request in the…
GrailsBeginner98
  • 101
  • 6
1
vote
1 answer

Conclave does not start in release mode after passing -PenclaveMode=release

I am trying to start Conclave in release mode, followed instructions as below : // Firstly, built the signing material: ./gradlew prepareForSigning -PenclaveMode=release // Generated a signature from the signing material. The password for the…
Pooja Kamat
  • 21
  • 3
1
2 3 4