The released case-studies and the benchmarks are available from the Panoply code repository Case-studies * ret = TopensslEnclave_ecall_test_speed_crypto(global_eid, &ecall_return, argc, argv) */ Ret = TopensslEnclave_ecall_test_bm_ssl(global_eid, &ecall_return, argc, argv) You can modify the above code to execute the SSL test. Ret = TopensslEnclave_ecall_test_speed_crypto(global_eid, &ecall_return, argc, argv) * ret = TopensslEnclave_ecall_test_bm_ssl(global_eid, &ecall_return, argc, argv) */ For running the complete benchmark, just run the app file without any arguments. You can try other tests for the OpenSSL benchmark. This produces a file for enclave and an app file for the executable. This produces libssl.a and libcrypto.a files in the topenssl folder.
#Panoply 14740 zip file
You can download the demo code from the project branch Executing the OpenSSL Demo Example Extract the zip file You can setup the OpenSSL demo on your own machine using the following steps. After sucesfully building the Sample, test it by running.
To do this, copy the sample code (the folder is located by default in /opt/intel/sgxsdk/SampleCode/SampleEnclave) to your workspace and build it ( make all inside SampleEnclave folder). Version 1.6 Resources for Troubleshooting Intel Developer Zone:īefore you start with Panoply, you should ensure that you are able to execute SGX applications.
#Panoply 14740 install
Version 1.6 Build and Install Intel SGX SDK and Intel SGX PSW
#Panoply 14740 driver
Intel SGX Setup Build and Install Intel SGX Driver
#Panoply 14740 software
Run the test-sgx.c code from to quickly check if SGX is available for your CPU and enabled in BIOS.įollowing is the software configuration required for Intel SGX SDK and Panoply. Hardware Support and BIOS SettingsĬheck if your machine is listed in the following list of hardware which supports Intel SGXĮnsure that you have enabled SGX support in your BIOS. The SGX driver, SDK and PSW are provided by Intel. Out of these, the hardware support depends on your processor and the BIOS support is provided by the vendor. The Linux SGX developer environment comprises of hardware with SGX support, bios support for SGX, the SGX driver, the SGX SDK, and the SGX Platform Software. If you have an existing SGX developement environment, then proceed directly to the demo instructions. Please follow the instructions below, if you are starting from a fresh non-SGX environment. Then you can quickly test the Panoply applications. Before you start using Panoply, you should setup a stable Intel SDK developement environment. Panoply comprises of a set of API libraries and build extensions. Panoply is implemented on top of the Intel SDK 1.6 shipped for Linux Kernel v3.13. In contrast to previous systems that enable comparable richness, Panoply offers two orders of magnitude lower TCB. Thus, commodity Linux applications can enhance security by splitting their application logic in one or more enclaves, or by importing enclave-libraries, with little effort. Further, Panoply enforces a strong integrity property for the inter-enclave interactions, ensuring that the execution of the application follows the legitimate control and data-flow even if the OS misbehaves.
Panoply exposse the standard POSIX abstractions to application logic, including access to filesystems, network, multi-threading, multi-processing and thread synchronization primitives.
We present a new system called Panoply which bridges the gap between the SGX-native abstractions and the standard OS abstractions which feature-rich, commodity Linux applications require. These OS abstractions are used ubiquitously in real-world applications. While being a promising hardware-rooted building block, enclaves have severely limited capabilities, such as no native access to system calls and standard OS abstractions. Enclave memory is isolated from all other software on the system, even from the privileged OS or hypervisor. Intel SGX, a new security capability in emerging CPUs, allows user-level application code to execute in hardware isolated enclaves.
0 kommentar(er)
