Contents
How does Intel SGX work?
SGX involves encryption by the CPU of a portion of memory. The enclave is decrypted on the fly only within the CPU itself, and even then, only for code and data running from within the enclave itself. The processor thus protects the code from being “spied on” or examined by other code.
What is Intel SGX device and software?
Intel® Software Guard Extensions (Intel® SGX) is a set of instructions that increases the security of application code and data, giving them more protection from disclosure or modification.
What is graphene SGX?
Graphene runs unmodified applications inside Intel. SGX. It supports dynamically loaded libraries, runtime linking, multi-process abstractions, and file authentication. For additional security, Graphene performs cryptographic and semantic checks at untrusted host interface.
What is graphene software?
Graphene is a lightweight guest OS, designed to run a single Linux application with minimal host requirements. Graphene supports running Linux applications using the Intel SGX (Software Guard Extensions) technology (we call this version Graphene-SGX).
What is library OS?
A unikernel is a specialised, single address space machine image constructed by using library operating systems. A developer selects, from a modular stack, the minimal set of libraries which correspond to the OS constructs required for the application to run.
What is a graphene cloud?
When carbon atoms in graphene’s honeycomb-like structure are removed, electrons around the resulting holes form clouds that act like microscopic magnets.
What can I do with the Intel SGX SDK?
Intel SGX SDK: The Intel SGX SDK from Intel is a collection of APIs, sample source code, libraries, and tools that enable the software developer to write and debug Intel SGX applications in C/C++. The SDK installs a Microsoft Visual Studio software wizard to aid in rapid development of Intel SGX enabled applications.
Are there any BIOS settings for Intel SGX?
There are three possible BIOS settings. Intel Software Guard Extensions (Intel® SGX) is enabled and available for use in applications. Intel SGX can be enabled by software applications, but it is not available until this occurs (called the “software opt-in”). Enabling Intel SGX via software opt-in may require a system reboot.
What do you need to know about Intel Software Guard Extensions?
Intel® Software Guard Extensions (Intel® SGX) is an Intel technology for application developers seeking to protect select code and data from disclosure or modification. Intel SGX makes such protections possible through the use of enclaves. Enclaves are protected areas of execution.
How to enable Intel SGX via software opt-in?
The default option for the Intel reference BIOS is 128 MB. If Software Controlled is set, your application must use the API for enabling Intel SGX mentioned in the Intel SGX feature detection procedure (link previously provided). Note: Enabling Intel SGX via software opt-in may require a system reboot.