Re: [PATCH v5 11/11] intel_sgx: driver documentation

From: Borislav Petkov
Date: Mon Nov 20 2017 - 17:43:17 EST

On Tue, Nov 21, 2017 at 12:37:41AM +0200, Jarkko Sakkinen wrote:
> Firmware cannot access the memory inside an enclave. CPU asserts every
> memory access coming outside the enclave.

But "firmware could potentially configure the root key hash for the
enclave." How about the owner configures the root key hash instead?
Along with deciding whether to lock down the feature control register or


Good mailing practices for 400: avoid top-posting and trim the reply.