search

intel / linux-sgx

Intel SGX for Linux*
https://www.intel.com/content/www/us/en/developer/tools/software-guard-extensions/linux-overview.html
Other
1.33k stars 544 forks source link

the availability of sgx_get_trusted_time() API #954

Open li0926 opened 1 year ago

li0926 commented 1 year ago

I have a question about the availability of sgx_get_trusted_time() API on Linux platforms.

According to this article (https://www.intel.ca/content/www/ca/en/support/articles/000057968/software/intel-security-products.html), support for Intel® Software Guard Extensions (Intel® SGX) Platform Services was removed from all Linux-based platforms, including client platforms, beginning with Intel SGX SDK for Linux 2.9. However, according to this article (https://www.intel.com/content/www/us/en/content-details/671564/trusted-time-and-monotonic-counters-with-intel-software-guard-extensions-platform-services.html), sgx_get_trusted_time() API is based on the Platform Services. So I’m wondering if this API is still available on Linux platforms or not. Could you please clarify this for me? Thank you.

llly commented 1 year ago

sgx_get_trusted_time is no longer supported on Linux.

li0926 commented 1 year ago

sgx_get_trusted_time is no longer supported on Linux.

Thanks. do you know how to get a trusted time in SGX now?

llly commented 1 year ago

Thanks. do you know how to get a trusted time in SGX now?

No such kind of API is provided now.

zzylol commented 1 year ago

How to read an untrusted timestamp in Enclave?

lzha101 commented 1 year ago

You can provide OCALLs to get the time from outside.