This repository was archived by the owner on May 3, 2022. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 28
SGX architectural
axelsimon edited this page Nov 25, 2019
·
7 revisions
A system with SGX 2 and EDMM support.
- SGX assumes that clients want proof that the application should be allowed to run within the enclave, and therefore applications need to be signed by Intel (or chain does…).
- Note that (as of 2017-07-04), as currently implemented in upstream Linux code, this requirement is loosened, and anybody can run anything in the enclave.
- While it is still common practice to involve Intel's or other 3rd party hosts in attestation, Enarx makes use of Intel's Data Center Attestation Primitives, which allows the attestation process to involve the attesting and attested parties only.