Exercise: SGX

Read the following sections from the Intel SGX Explained paper: §1, §5 through §5.4, and §5.6

  • Briefly describe how SGX prevents the OS from reading enclave memory.

  • SGX requires the OS to construct and initialize the enclave. What defense is there for the OS tampering with the enclave during this process?

  • Compare and contrast SGX enclaves with VMX guest virtual machines.

  • Describe some of the possible uses of SGX. Do you think using SGX is a good idea?

In answers.txt, write up your responses. Upload the file through Canvas.