Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency on Intel AESM to Intel SGX lib for OpenEnclave #44

Closed
CodeMonkeyLeet opened this issue Nov 22, 2017 · 3 comments
Closed
Assignees
Labels
engineering Issue is related to tools and processes necessary for maintaining the Open Enclave repo functionality Issue describes an enhancement or addition of functionality to Open Enclave SDK story Issue describes a user scenario to be enabled. Unit of prioritization for project planning.
Milestone

Comments

@CodeMonkeyLeet
Copy link
Contributor

OpenEnclave currently depends on the existing Intel AESM with dependencies on Intel signing for launch and EPID for quoting. We are requesting that Intel supports non-Intel specific versions of these architectural enclaves packaged as a dependency library for the OpenEnclave project so that it can be consumed by the OSS community without business relationships to Intel. This includes:

  • Using the Intel upstream kernel driver and Launch Enclave implementation that does not require Intel signing
  • Using the Intel ECDSA Quoting Enclave that relies on standard PKI and not EPID
  • Abstracting away the differences between the Intel drivers for enclave management functionality
  • Enabling a cross-platform dependency with Windows
@CodeMonkeyLeet CodeMonkeyLeet added the story Issue describes a user scenario to be enabled. Unit of prioritization for project planning. label Nov 22, 2017
@CodeMonkeyLeet CodeMonkeyLeet added this to the 2018.02 milestone Nov 22, 2017
@CodeMonkeyLeet CodeMonkeyLeet added this to To do in Public preview via automation Nov 22, 2017
@CodeMonkeyLeet CodeMonkeyLeet modified the milestones: 2018.02, 2018.03 Jan 6, 2018
@CodeMonkeyLeet
Copy link
Contributor Author

Intel deliverables for this are tentatively in March now.

@CodeMonkeyLeet
Copy link
Contributor Author

Per Christine, we also now expect the existing dependencies on AESM to be preserved and available via build flags to allow developers to build debug apps on older Kabylake machines.

@CodeMonkeyLeet
Copy link
Contributor Author

Resolved by #252

Public preview automation moved this from In progress to Done May 24, 2018
@CodeMonkeyLeet CodeMonkeyLeet added engineering Issue is related to tools and processes necessary for maintaining the Open Enclave repo functionality Issue describes an enhancement or addition of functionality to Open Enclave SDK labels Jun 29, 2018
Britel pushed a commit that referenced this issue Nov 19, 2018
* Fix props file build warnings

Signed-off-by: Dave Thaler <dthaler@microsoft.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
engineering Issue is related to tools and processes necessary for maintaining the Open Enclave repo functionality Issue describes an enhancement or addition of functionality to Open Enclave SDK story Issue describes a user scenario to be enabled. Unit of prioritization for project planning.
Projects
No open projects
Development

No branches or pull requests

1 participant