[PATCH RESEND 0/3] x86/sgx: eextend ioctl

2021-03-31 Thread Raoul Strackx
...@linux.intel.com/T/#m93597f53d354201e72e26d93a968f167fcdf5930 Raoul Strackx (3): x86/sgx: Adding eextend ioctl x86/sgx: Fix compatibility issue with OPENSSL < 1.1.0 x86/sgx: eextend ioctl selftest arch/x86/include/uapi/asm/sgx.h | 11 + arch/x86/kernel/cpu/sgx/ioctl.c |

[PATCH RESEND 1/3] x86/sgx: Adding eextend ioctl

2021-03-31 Thread Raoul Strackx
The current sgx driver can only launch enclaves that always measure 4K pages. That may not necessarily be the case. This patch adds an ioctl to enable users to add the enclave measurement per 256 byte. Signed-off-by: Raoul Strackx --- arch/x86/include/uapi/asm/sgx.h | 11 ++ arch/x86

[PATCH RESEND 2/3] x86/sgx: Fix compatibility issue with OPENSSL < 1.1.0

2021-03-31 Thread Raoul Strackx
The `RSA_get0_key` function only got introduced in OpenSSL 1.1.0. This makes compilation fail with older versions. Signed-off-by: Raoul Strackx --- tools/testing/selftests/sgx/sigstruct.c | 5 - 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/tools/testing/selftests/sgx

[PATCH RESEND 3/3] x86/sgx: eextend ioctl selftest

2021-03-31 Thread Raoul Strackx
In order to test the new eextend ioctl, the SGX selftest is modified to only partially measure the last page of segments. Most segments are larger than 4k, so the MEASURE flag for SGX_IOC_ENCLAVE_ADD_PAGE is still being tested. Signed-off-by: Raoul Strackx --- tools/testing/selftests/sgx

[PATCH v2 0/3] x86/sgx: eextend ioctl

2021-04-12 Thread Raoul Strackx
per 256 bytes of enclave memory. With this patch in place, Linux will be able to build all valid SGXv1 enclaves. See additional discussion at: https://lore.kernel.org/linux-sgx/20200220221038.ga26...@linux.intel.com/ T/#m93597f53d354201e72e26d93a968f167fcdf5930 Raoul Strackx (3): x86/sgx

[PATCH v2 1/3] x86/sgx: Adding eextend ioctl

2021-04-12 Thread Raoul Strackx
enables the driver to load all SGXv1 compatible enclaves. Signed-off-by: Raoul Strackx --- arch/x86/include/uapi/asm/sgx.h | 11 ++ arch/x86/kernel/cpu/sgx/ioctl.c | 81 +++-- 2 files changed, 81 insertions(+), 11 deletions(-) diff --git a/arch/x86/include

[PATCH v2 2/3] x86/sgx: Fix compatibility issue with OPENSSL < 1.1.0

2021-04-12 Thread Raoul Strackx
The `RSA_get0_key` function only got introduced in OpenSSL 1.1.0. This makes compilation fail with older versions. Signed-off-by: Raoul Strackx --- tools/testing/selftests/sgx/sigstruct.c | 5 - 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/tools/testing/selftests/sgx

[PATCH v2 3/3] x86/sgx: eextend ioctl selftest

2021-04-12 Thread Raoul Strackx
In order to test the new eextend ioctl, the SGX selftest is modified to only partially measure the last page of segments. Most segments are larger than 4k, so the MEASURE flag for SGX_IOC_ENCLAVE_ADD_PAGE is still being tested. Signed-off-by: Raoul Strackx --- tools/testing/selftests/sgx

Re: [PATCH RESEND 0/3] x86/sgx: eextend ioctl

2021-04-01 Thread Raoul Strackx
On 3/31/21 5:53 PM, Dave Hansen wrote: > On 3/31/21 5:50 AM, Raoul Strackx wrote: >> The sgx driver can only load enclaves whose pages are fully measured. >> This may exclude existing enclaves from running. This patch adds a >> new ioctl to measure 256 byte chunks at a time

Re: [PATCH RESEND 0/3] x86/sgx: eextend ioctl

2021-04-01 Thread Raoul Strackx
On 4/1/21 6:11 PM, Dave Hansen wrote: > On 4/1/21 7:56 AM, Raoul Strackx wrote: >> >> SOLUTION OF THIS PATCH >> This patch adds a new ioctl to enable userspace to execute EEXTEND leaf >> functions per 256 bytes of enclave memory. This enables enclaves to be >&