mirror of
https://github.com/intel/linux-sgx
synced 2026-06-08 14:49:32 +00:00
Li, Xun
28817533cc
Added support for the Key Separation and Sharing (KSS) feature. Provided a set of new encryption and decryption functions such as sgx_hmac256_*. Provided a new untrusted API: sgx_get_target_info. Provided a new untrusted API: sgx_create_enclave_from_buffer_ex. Updated the cryptography library and Architecture Enclaves to use Intel(R) Integrated Performance Primitives Cryptography 2019 Update 1. Fixed bugs. Signed-off-by: Li, Xun <xun.li@intel.com>
----------------------------
Purpose of SealedData
----------------------------
The project demonstrates:
- How an application enclave can encrypt and integrity-protect enclave secrets
to store them outside the enclave
- How an application enclave can use Monotonic Counter to implement
replay-protected policy, and Trusted Time to enforce time based policy
------------------------------------
How to Build/Execute the Sample Code
------------------------------------
1. Install Intel(R) Software Guard Extensions (Intel(R) SGX) SDK for Linux* OS
2. Make sure your environment is set:
$ source ${sgx-sdk-install-path}/environment
3. Build the project with the prepared Makefile:
a. Hardware Mode, Debug build:
$ make
b. Hardware Mode, Pre-release build:
$ make SGX_PRERELEASE=1 SGX_DEBUG=0
c. Hardware Mode, Release build:
$ make SGX_DEBUG=0
d. Simulation Mode, Debug build:
$ make SGX_MODE=SIM
e. Simulation Mode, Pre-release build:
$ make SGX_MODE=SIM SGX_PRERELEASE=1 SGX_DEBUG=0
f. Simulation Mode, Release build:
$ make SGX_MODE=SIM SGX_DEBUG=0
4. Execute the binary directly:
$ ./app
5. Remember to "make clean" before switching build mode