intel / linux-sgx

Intel SGX for Linux*
https://www.intel.com/content/www/us/en/developer/tools/software-guard-extensions/linux-overview.html
Other
1.32k stars 539 forks source link

Does the enclaves signer wants a static or shared library? #904

Open Abhiroop opened 1 year ago

Abhiroop commented 1 year ago

I am trying to sign an enclave library that I have created that includes a Haskell runtime and other facilities. I was wondering what input does the signer require to sign the enclave library? Is it a shared library or a static one? In here: https://github.com/intel/linux-sgx/blob/master/psw/urts/parser/elfparser.cpp#L145-L149 I see that the ELF parser looks for the ET_DYN header, which indicated the need for a shared library. However, example projects that I have seen create a static linked library and then signs it. I wonder what is the desired input.

lzha101 commented 1 year ago

sgx_sign requires a shared library as the input enclave library to be signed.