digawp / hello-enclave Goto Github PK

Adding some sample code for a ECALL and OCALL, and finishing the TODOs in the readme would be very helpful for beginners, like me.

Getting the following error message when I'm trying to run the program after compilation

./app
./app: error while loading shared libraries: libsgx_urts_sim.so: cannot open shared object file: No such file or directory

libsgx_urts_sim.so resides in the following two location in my system.

/opt/intel/sgxsdk/sdk_libs/libsgx_urts_sim.so
/opt/intel/sgxsdk/lib64/libsgx_urts_sim.so

I didn't found any option to configure location of the library in program code. Please help

Hi, bro. Our analysis tool detected that this sample output the p_decrypted_text parameter of sgx_unseal_data() in main function of App . A possible data leak path is Function unseal -> Function main

We understand you may just want to set a sample of sealing/unsealing data inside a enclave .But according to 《Intel® Software Guard Extensions (Intel® SGX) SDK Developer Reference》 . The sgx_unseal_data() function should be utilized to restore
secret data that was preserved after an earlier instantiation of this enclave saved this data . It may not proper to directly print out unsealed results by cout .

We appreciate your great efforts to setting a sample for SGX beginners . To make this a better sample , we strongly recommended you to remove the cout part in main function , or use encrpt/dencrpt functions replace the sealing/unsealing ones.

Intel sealing&unsealing Sample https://github.com/intel/linux-sgx/tree/master/SampleCode/SealUnseal/App may be helpful to prove my view.