Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1388776

Re: [PATCH 0/6] Intel Secure Guard Extensions

From Ingo Molnar <mingo@kernel.org>
Newsgroups linux.kernel
Subject Re: [PATCH 0/6] Intel Secure Guard Extensions
Date 2016-04-27 10:20 +0200
Message-ID <rssRt-6lL-23@gated-at.bofh.it> (permalink)
References (2 earlier) <rsgwV-4xy-3@gated-at.bofh.it> <rsh9F-4Uo-33@gated-at.bofh.it> <rshjk-4Z5-9@gated-at.bofh.it> <rshCG-5w7-19@gated-at.bofh.it> <rsjOa-7f9-3@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

* Andy Lutomirski <luto@amacapital.net> wrote:

> > What new syscalls would be needed for ssh to get all this support?
> 
> This patchset or similar, plus some user code and an enclave to use.
> 
> Sadly, on current CPUs, you also need Intel to bless the enclave.  It looks like 
> new CPUs might relax that requirement.

That looks like a fundamental technical limitation in my book - to an open source 
user this is essentially a very similar capability as tboot: it only allows the 
execution of externally blessed static binary blobs...

I don't think we can merge any of this upstream until it's clear that the hardware 
owner running open-source user-space can also freely define/start his own secure 
enclaves without having to sign the enclave with any external party. I.e. 
self-signed enclaves should be fundamentally supported as well.

Thanks,

	Ingo

Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

[PATCH 0/6] Intel Secure Guard Extensions Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com> - 2016-04-25 19:40 +0200
  [PATCH 5/6] intel_sgx: driver documentation Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com> - 2016-04-25 19:40 +0200
    Re: [PATCH 5/6] intel_sgx: driver documentation Andy Lutomirski <luto@kernel.org> - 2016-04-25 22:10 +0200
  Re: [PATCH 0/6] Intel Secure Guard Extensions Greg KH <gregkh@linuxfoundation.org> - 2016-04-25 20:00 +0200
    Re: [PATCH 0/6] Intel Secure Guard Extensions Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com> - 2016-04-25 21:10 +0200
      Re: [PATCH 0/6] Intel Secure Guard Extensions Andy Lutomirski <luto@amacapital.net> - 2016-04-25 21:30 +0200
  Re: [PATCH 3/6] intel_sgx: driver for Intel Secure Guard eXtensions Greg KH <gregkh@linuxfoundation.org> - 2016-04-25 20:00 +0200
    Re: [PATCH 3/6] intel_sgx: driver for Intel Secure Guard eXtensions Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com> - 2016-04-25 21:10 +0200
  Re: [PATCH 0/6] Intel Secure Guard Extensions Andy Lutomirski <luto@amacapital.net> - 2016-04-26 21:10 +0200
    Re: [PATCH 0/6] Intel Secure Guard Extensions Pavel Machek <pavel@ucw.cz> - 2016-04-26 21:50 +0200
      Re: [PATCH 0/6] Intel Secure Guard Extensions Andy Lutomirski <luto@amacapital.net> - 2016-04-26 22:00 +0200
        Re: [PATCH 0/6] Intel Secure Guard Extensions One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk> - 2016-04-26 22:20 +0200
        Re: [PATCH 0/6] Intel Secure Guard Extensions Pavel Machek <pavel@ucw.cz> - 2016-04-26 22:20 +0200
          Re: [PATCH 0/6] Intel Secure Guard Extensions One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk> - 2016-04-26 23:10 +0200
            Re: [PATCH 0/6] Intel Secure Guard Extensions Pavel Machek <pavel@ucw.cz> - 2016-04-27 00:00 +0200
              Re: [PATCH 0/6] Intel Secure Guard Extensions Andy Lutomirski <luto@amacapital.net> - 2016-04-27 00:40 +0200
          Re: [PATCH 0/6] Intel Secure Guard Extensions Andy Lutomirski <luto@amacapital.net> - 2016-04-27 00:40 +0200
            Re: [PATCH 0/6] Intel Secure Guard Extensions Pavel Machek <pavel@ucw.cz> - 2016-04-27 09:40 +0200
            Re: [PATCH 0/6] Intel Secure Guard Extensions Ingo Molnar <mingo@kernel.org> - 2016-04-27 10:20 +0200
              Re: [PATCH 0/6] Intel Secure Guard Extensions Andy Lutomirski <luto@amacapital.net> - 2016-04-27 16:10 +0200
      Re: [PATCH 0/6] Intel Secure Guard Extensions One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk> - 2016-04-26 22:30 +0200
  Re: [PATCH 0/6] Intel Secure Guard Extensions Pavel Machek <pavel@ucw.cz> - 2016-04-26 21:10 +0200
  Re: [PATCH 3/6] intel_sgx: driver for Intel Secure Guard eXtensions Jethro Beekman <kernel@jbeekman.nl> - 2016-04-27 09:00 +0200
    Re: [PATCH 3/6] intel_sgx: driver for Intel Secure Guard eXtensions Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com> - 2016-04-27 14:50 +0200
      Re: [PATCH 3/6] intel_sgx: driver for Intel Secure Guard eXtensions Jethro Beekman <kernel@jbeekman.nl> - 2016-04-28 01:40 +0200

csiph-web