Intel SGX: Creating an attestation report within the enclave











up vote
2
down vote

favorite












I'm using SCONE Docker image to run my code inside Intel SGX enclave.



SCONE handles the creation of enclaves and their eventual destruction, which makes my life as a programmer easier. But if I want to perform a Local or Remote Attestation of my code inside the enclave, I need to rely on SCONE's proprietary service.



I wonder if it's possible to create a report for attestation from within the current enclave. In other words, the code running inside the enclave must be able to create an attestation report and send it out - all without leaving the enclave.



I've checked Intel SGX documentation and samples code. All of the calls to EREPORT function rely on knowing the Enclave ID, which I don't know (SCONE creates enclaves on my behalf). Hence my question is mainly about the way to find out the enclave information from within it.



Is it actually possible?










share|improve this question







New contributor




Igor is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
























    up vote
    2
    down vote

    favorite












    I'm using SCONE Docker image to run my code inside Intel SGX enclave.



    SCONE handles the creation of enclaves and their eventual destruction, which makes my life as a programmer easier. But if I want to perform a Local or Remote Attestation of my code inside the enclave, I need to rely on SCONE's proprietary service.



    I wonder if it's possible to create a report for attestation from within the current enclave. In other words, the code running inside the enclave must be able to create an attestation report and send it out - all without leaving the enclave.



    I've checked Intel SGX documentation and samples code. All of the calls to EREPORT function rely on knowing the Enclave ID, which I don't know (SCONE creates enclaves on my behalf). Hence my question is mainly about the way to find out the enclave information from within it.



    Is it actually possible?










    share|improve this question







    New contributor




    Igor is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
    Check out our Code of Conduct.






















      up vote
      2
      down vote

      favorite









      up vote
      2
      down vote

      favorite











      I'm using SCONE Docker image to run my code inside Intel SGX enclave.



      SCONE handles the creation of enclaves and their eventual destruction, which makes my life as a programmer easier. But if I want to perform a Local or Remote Attestation of my code inside the enclave, I need to rely on SCONE's proprietary service.



      I wonder if it's possible to create a report for attestation from within the current enclave. In other words, the code running inside the enclave must be able to create an attestation report and send it out - all without leaving the enclave.



      I've checked Intel SGX documentation and samples code. All of the calls to EREPORT function rely on knowing the Enclave ID, which I don't know (SCONE creates enclaves on my behalf). Hence my question is mainly about the way to find out the enclave information from within it.



      Is it actually possible?










      share|improve this question







      New contributor




      Igor is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.











      I'm using SCONE Docker image to run my code inside Intel SGX enclave.



      SCONE handles the creation of enclaves and their eventual destruction, which makes my life as a programmer easier. But if I want to perform a Local or Remote Attestation of my code inside the enclave, I need to rely on SCONE's proprietary service.



      I wonder if it's possible to create a report for attestation from within the current enclave. In other words, the code running inside the enclave must be able to create an attestation report and send it out - all without leaving the enclave.



      I've checked Intel SGX documentation and samples code. All of the calls to EREPORT function rely on knowing the Enclave ID, which I don't know (SCONE creates enclaves on my behalf). Hence my question is mainly about the way to find out the enclave information from within it.



      Is it actually possible?







      intel sgx enclave






      share|improve this question







      New contributor




      Igor is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.











      share|improve this question







      New contributor




      Igor is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.









      share|improve this question




      share|improve this question






      New contributor




      Igor is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.









      asked Nov 10 at 14:39









      Igor

      111




      111




      New contributor




      Igor is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.





      New contributor





      Igor is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.






      Igor is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.





























          active

          oldest

          votes











          Your Answer






          StackExchange.ifUsing("editor", function () {
          StackExchange.using("externalEditor", function () {
          StackExchange.using("snippets", function () {
          StackExchange.snippets.init();
          });
          });
          }, "code-snippets");

          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "1"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });






          Igor is a new contributor. Be nice, and check out our Code of Conduct.










           

          draft saved


          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53240011%2fintel-sgx-creating-an-attestation-report-within-the-enclave%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown






























          active

          oldest

          votes













          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes








          Igor is a new contributor. Be nice, and check out our Code of Conduct.










           

          draft saved


          draft discarded


















          Igor is a new contributor. Be nice, and check out our Code of Conduct.













          Igor is a new contributor. Be nice, and check out our Code of Conduct.












          Igor is a new contributor. Be nice, and check out our Code of Conduct.















           


          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53240011%2fintel-sgx-creating-an-attestation-report-within-the-enclave%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          Florida Star v. B. J. F.

          Error while running script in elastic search , gateway timeout

          Adding quotations to stringified JSON object values