houzhizhen的专栏

The number after the noun is the chapter number the noun first appeared.SGXIntel Software Guard Extensions.PRM 5.1Processor Reserved Memory(PRM), which is a submit of DRAM that cannot be di...

Published on March 28, 2016TranslateChinese SimplifiedChinese TraditionalEnglishFrenchGermanItalianPortugueseRussianSpanishTurkishTranslatePrerequisites:If you don’t have OpenSSL installed,...

isv_enclave/isv_enclave.edlisv_enclave.edl import sgx_tkey_exchange.edl.enclave { from "sgx_tkey_exchange.edl" import *; include "sgx_key_exchange.h" include "sgx_trts.h" trusted {...

Enclave Signing Key Management:2-step method using an external signing tool:First step:At the end of the enclave build process, the signing tool generates the enclave signing material. The ISV takes...

Since releasing the Intel® Software Guard Extensions (Intel® SGX) SDK, we've had a few questions about debug vs pre-release vs release mode (production) enclaves.Part of the security model of Intel®...

Enclave.edlimport Edger8rSyntax/Types.edl/* Enclave.edl - Top EDL file. */enclave { include "user_types.h" /* buffer_t */ from "Edger8rSyntax/Types.edl" import *; from "Edger8r...

AES是一种对称加密算法，它的相关概念在此不赘述。GCM ( Galois/Counter Mode) 指的是该对称加密采用Counter模式，并带有GMAC消息认证码。在详细介绍AES-GCM之前，我们先了解一些相关概念。下文中出现的符号:Ek 使用秘钥k对输入做对称加密运算 XOR 异或运算 Mh 将输入与秘钥h在有限域GF(2^128)上做乘...

DRM_enclave.edlDRM_enclave.edl import sgx_tae_service.edl and add six trusted functions.enclave { from "sgx_tae_service.edl" import *; trusted { /* define ECALLs here. */ public...

不可信函数可能设置关于调用预定和DLL链接的属性，你可以在这里看看调用约定的详细信息http://msdn.microsoft.com/en-us/library/984x0h58。cdecl调用约定是C标准的默认方式。错误的使用cdecl,stdcall,fastcall关键可能导致链接错误。OCALL函数（不可信）可能在DLL中实现，dllimport关键字就用来指定这种属性。错误的使用...

Published on March 29, 2016TranslateChinese SimplifiedChinese TraditionalEnglishFrenchGermanItalianPortugueseRussianSpanishTurkishTranslateIntel Attestation Service (IAS) uses MTLS (Mutual Tr...