This is an old revision of the document!

Intel's Software Guard Extensions (SGX) is a set of extensions to the Intel architecture that aims to provide integrity and confidentiality guarantees to security-sensitive computation performed on a computer where all the privileged software (kernel, hypervisor, etc) is potentially malicious.

This is Intel SGX support for FreeBSD 12.0-CURRENT.

1. Apply the kernel-support from https://reviews.freebsd.org/D11113 and rebuild kernel.

% sudo kldload sgx

2. Build SGX SDK

% pkg install protobuf gmake gcc48
% git clone https://github.com/bukinr/freebsd-sgx.git
% cd freebsd-sgx
% sh download_prebuilt.sh
% gmake -j4
% sudo cp build/linux/libsgx_uae_service.so /usr/lib/
% sudo cp build/linux/libsgx_urts.so /usr/lib/

4. Run SGX service daemon

sudo ./build/linux/aesm_service

5. Build and run sample application

% cd SampleCode/LocalAttestation/
% gmake
% sudo ./app

Papers Intel SGX Explained