Re: [PATCH v2 0/3] x86/sgx: eextend ioctl

2021-04-16 Thread Jarkko Sakkinen
On Wed, Apr 14, 2021 at 01:01:02PM +0200, Jethro Beekman wrote: > On 2021-04-14 12:52, Jarkko Sakkinen wrote: > > On Mon, Apr 12, 2021 at 10:59:56AM +0200, Raoul Strackx wrote: > >> Creation of an SGX enclave consists of three steps. First, a new enclave > >> environment is created by the ECREATE l

Re: [PATCH v2 0/3] x86/sgx: eextend ioctl

2021-04-14 Thread Jarkko Sakkinen
On Mon, Apr 12, 2021 at 07:01:39PM +0200, Jethro Beekman wrote: > On 2021-04-12 18:47, Dave Hansen wrote: > > On 4/12/21 9:41 AM, Jethro Beekman wrote: > >> Yes this still doesn't let one execute all possible ECREATE, EADD, > >> EEXTEND, EINIT sequences. > > > > OK, so we're going in circles now.

Re: [PATCH v2 0/3] x86/sgx: eextend ioctl

2021-04-14 Thread Jethro Beekman
On 2021-04-14 12:52, Jarkko Sakkinen wrote: > On Mon, Apr 12, 2021 at 10:59:56AM +0200, Raoul Strackx wrote: >> Creation of an SGX enclave consists of three steps. First, a new enclave >> environment is created by the ECREATE leaf function. Some enclave settings >> are specified at this step by pas

Re: [PATCH v2 0/3] x86/sgx: eextend ioctl

2021-04-14 Thread Jarkko Sakkinen
On Mon, Apr 12, 2021 at 10:59:56AM +0200, Raoul Strackx wrote: > Creation of an SGX enclave consists of three steps. First, a new enclave > environment is created by the ECREATE leaf function. Some enclave settings > are specified at this step by passing an SGX Enclave Control Structure > (SECS) th

Re: [PATCH v2 0/3] x86/sgx: eextend ioctl

2021-04-12 Thread Jethro Beekman
On 2021-04-12 18:47, Dave Hansen wrote: > On 4/12/21 9:41 AM, Jethro Beekman wrote: >> Yes this still doesn't let one execute all possible ECREATE, EADD, EEXTEND, >> EINIT sequences. > > OK, so we're going in circles now. > > I don't believe we necessarily *WANT* or need Linux to support "all >

Re: [PATCH v2 0/3] x86/sgx: eextend ioctl

2021-04-12 Thread Dave Hansen
On 4/12/21 8:58 AM, Jethro Beekman wrote: > On 2021-04-12 17:36, Dave Hansen wrote: >> On 4/12/21 1:59 AM, Raoul Strackx wrote: >>> This patch set adds a new ioctl to enable userspace to execute EEXTEND >>> leaf functions per 256 bytes of enclave memory. With this patch in place, >>> Linux will be

Re: [PATCH v2 0/3] x86/sgx: eextend ioctl

2021-04-12 Thread Dave Hansen
On 4/12/21 9:41 AM, Jethro Beekman wrote: > Yes this still doesn't let one execute all possible ECREATE, EADD, EEXTEND, > EINIT sequences. OK, so we're going in circles now. I don't believe we necessarily *WANT* or need Linux to support "all possible ECREATE, EADD, EEXTEND, EINIT sequences". Ye

Re: [PATCH v2 0/3] x86/sgx: eextend ioctl

2021-04-12 Thread Jethro Beekman
On 2021-04-12 18:40, Dave Hansen wrote: > On 4/12/21 8:58 AM, Jethro Beekman wrote: >> On 2021-04-12 17:36, Dave Hansen wrote: >>> On 4/12/21 1:59 AM, Raoul Strackx wrote: This patch set adds a new ioctl to enable userspace to execute EEXTEND leaf functions per 256 bytes of enclave memory

Re: [PATCH v2 0/3] x86/sgx: eextend ioctl

2021-04-12 Thread Jethro Beekman
On 2021-04-12 17:36, Dave Hansen wrote: > On 4/12/21 1:59 AM, Raoul Strackx wrote: >> This patch set adds a new ioctl to enable userspace to execute EEXTEND >> leaf functions per 256 bytes of enclave memory. With this patch in place, >> Linux will be able to build all valid SGXv1 enclaves. > > Thi

Re: [PATCH v2 0/3] x86/sgx: eextend ioctl

2021-04-12 Thread Dave Hansen
On 4/12/21 1:59 AM, Raoul Strackx wrote: > This patch set adds a new ioctl to enable userspace to execute EEXTEND > leaf functions per 256 bytes of enclave memory. With this patch in place, > Linux will be able to build all valid SGXv1 enclaves. This didn't cover why we need a *NEW* ABI for this i

[PATCH v2 0/3] x86/sgx: eextend ioctl

2021-04-12 Thread Raoul Strackx
Creation of an SGX enclave consists of three steps. First, a new enclave environment is created by the ECREATE leaf function. Some enclave settings are specified at this step by passing an SGX Enclave Control Structure (SECS) that contains the enclave MRENCLAVE, MRSIGNER, etc. This instruction also