Intel SGX: Creating an attestation report within the enclave
up vote
2
down vote
favorite
I'm using SCONE Docker image to run my code inside Intel SGX enclave.
SCONE handles the creation of enclaves and their eventual destruction, which makes my life as a programmer easier. But if I want to perform a Local or Remote Attestation of my code inside the enclave, I need to rely on SCONE's proprietary service.
I wonder if it's possible to create a report for attestation from within the current enclave. In other words, the code running inside the enclave must be able to create an attestation report and send it out - all without leaving the enclave.
I've checked Intel SGX documentation and samples code. All of the calls to EREPORT function rely on knowing the Enclave ID, which I don't know (SCONE creates enclaves on my behalf). Hence my question is mainly about the way to find out the enclave information from within it.
Is it actually possible?
intel sgx enclave
asked Nov 10 at 14:39
Igor
111
New contributor
Igor is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
up vote
2
down vote
favorite
I'm using SCONE Docker image to run my code inside Intel SGX enclave.
SCONE handles the creation of enclaves and their eventual destruction, which makes my life as a programmer easier. But if I want to perform a Local or Remote Attestation of my code inside the enclave, I need to rely on SCONE's proprietary service.
I wonder if it's possible to create a report for attestation from within the current enclave. In other words, the code running inside the enclave must be able to create an attestation report and send it out - all without leaving the enclave.
I've checked Intel SGX documentation and samples code. All of the calls to EREPORT function rely on knowing the Enclave ID, which I don't know (SCONE creates enclaves on my behalf). Hence my question is mainly about the way to find out the enclave information from within it.
Is it actually possible?
intel sgx enclave
asked Nov 10 at 14:39
Igor
111
New contributor
Igor is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
up vote
2
down vote
favorite
up vote
2
down vote
favorite
I'm using SCONE Docker image to run my code inside Intel SGX enclave.
SCONE handles the creation of enclaves and their eventual destruction, which makes my life as a programmer easier. But if I want to perform a Local or Remote Attestation of my code inside the enclave, I need to rely on SCONE's proprietary service.
I wonder if it's possible to create a report for attestation from within the current enclave. In other words, the code running inside the enclave must be able to create an attestation report and send it out - all without leaving the enclave.
I've checked Intel SGX documentation and samples code. All of the calls to EREPORT function rely on knowing the Enclave ID, which I don't know (SCONE creates enclaves on my behalf). Hence my question is mainly about the way to find out the enclave information from within it.
Is it actually possible?
intel sgx enclave
asked Nov 10 at 14:39
Igor
111
New contributor
Igor is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
I'm using SCONE Docker image to run my code inside Intel SGX enclave.
SCONE handles the creation of enclaves and their eventual destruction, which makes my life as a programmer easier. But if I want to perform a Local or Remote Attestation of my code inside the enclave, I need to rely on SCONE's proprietary service.
I wonder if it's possible to create a report for attestation from within the current enclave. In other words, the code running inside the enclave must be able to create an attestation report and send it out - all without leaving the enclave.
I've checked Intel SGX documentation and samples code. All of the calls to EREPORT function rely on knowing the Enclave ID, which I don't know (SCONE creates enclaves on my behalf). Hence my question is mainly about the way to find out the enclave information from within it.
Is it actually possible?
intel sgx enclave
intel sgx enclave
asked Nov 10 at 14:39
Igor
111
New contributor
Igor is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked Nov 10 at 14:39
Igor
111
New contributor
Igor is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked Nov 10 at 14:39
Igor
111
New contributor
Igor is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked Nov 10 at 14:39
Igor
111
asked Nov 10 at 14:39
Igor
111
111
New contributor
Igor is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
Igor is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Igor is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
add a comment |
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Igor is a new contributor. Be nice, and check out our Code of Conduct.
Igor is a new contributor. Be nice, and check out our Code of Conduct.
Igor is a new contributor. Be nice, and check out our Code of Conduct.
Igor is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53240011%2fintel-sgx-creating-an-attestation-report-within-the-enclave%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
