Re: [PATCH v29 00/20] Intel SGX foundations

From: Jordan Hand
Date: Fri May 08 2020 - 12:16:32 EST


On 5/7/20 11:06 AM, Dr. Greg wrote:
On Wed, May 06, 2020 at 09:39:55AM -0700, Jordan Hand wrote:

Good afternoon, I hope the week is going well for everyone.

On 4/21/20 2:52 PM, Jarkko Sakkinen wrote:
Make the vDSO callable directly from C by preserving RBX and taking leaf
from RCX.

Tested with the Open Enclave SDK on top of Intel PSW. Specifically built
the Intel PSW with changes to support /dev/sgx mapping[1] new in v29.

Tested-by: Jordan Hand <jorhand@xxxxxxxxxxxxxxxxxxx>

[1] https://github.com/intel/linux-sgx/pull/530

Did you re-wire your SDK to convert all your ECALL and exception
handling to the new VDSO architecture?
>

No. We have many users of our SDK who rely on the out-of-tree driver and will for the foreseeable future. I aim to support both in-tree and out-of-tree with minimal code diff.


Failures in enclave loading and initialization demonstrate themselves
pretty clearly and are in the domain of the PSW being used. If there
are going to be subtle SGX application operability issues that need to
be found they will be in the new ECALL and exception handling
mechanisms.

Fair enough, no I have not tested those mechanisms. Apologies, I should have removed that line from the quoted text.

-Jordan