search

intel / linux-sgx

Intel SGX for Linux*
https://www.intel.com/content/www/us/en/developer/tools/software-guard-extensions/linux-overview.html
Other
1.3k stars 536 forks source link

Does SGX IPP crypto library support Crypto Multi-buffer Library #763

Open Glenrun opened 2 years ago

Glenrun commented 2 years ago

As title, is Crypto Multi-buffer Library supported, if not, will it be supported at some point and is there a road map?

jbdelcuv commented 2 years ago

The IPP Cryptography library includes multi-buffer support since the IPP 2020 Update 3 release, the Release Notes are posted here. The Linux 2.15.1 Open Source Release includes the IPP Crypto 2020.3 library. Note that the trusted library sgx_tcrypto does not wrap the multi-buffer API because the SGX AEs don't use it. To use the IPP Crypto multi-buffer API in your enclave, you only have to include the header file sgx_ippcp.h and call the required IPP Crypto functions directly, see the IPP Crypto Reference documentation.

lzha101 commented 2 years ago

IPP crypto mutli-buffer library seems the other library, which is not included in the libippcp.a. Currently we don't support the related functions inside enclaves. As to the plan, currently we don't have the plan to support it inside enclaves. If there is a strong request, we can evaluate to add the support.