SGX Download Details

Can I load a program larger than EPC memory into an enclave? I feel that this is theoretically acceptable, because

  • OS is free to change pages
  • EEXTEND measures the enclave gradually by 256 bytes.

Thus, it is theoretically possible to download a large program using only one page of EPC memory:

  • upload 4K bytes to an EPC page
  • measure loaded page
  • upload loaded page
  • upload the following 4K bytes to the same EPC page as in (1)

Do I understand the theory correctly? Although in practice, I immediately got an error when downloading large programs.

+4
source share
1 answer

Intel. [1] .

: , , , EPC.

- ( , v2) , HeapMaxSize ~ 90 . [1]

: SGX :

  • EAUG - SGXv2, .
  • EPC RAM ( EWB/ELD), Windows

, EPC?

  • EPC 90
  • Windows .
  • , (EINIT) SGXv1.
  • EPC
  • Intel EPC (, , )

, 90 . SDK , 1GiB [2]. , , EPC, . SGX , .

[1] https://software.intel.com/en-us/forums/intel-isa-extensions/topic/607004#comment-1857071

[2] 1GiB - 64KiB - TCSnum * 128KiB, TCSnum - . HeapMaxSize

+3

All Articles