This is an old revision of the document!

Intel's Software Guard Extensions (SGX) is a set of extensions to the Intel architecture that aims to provide integrity and confidentiality guarantees to security-sensitive computation performed on a computer where all the privileged software (kernel, hypervisor, etc) is potentially malicious.

This is Intel SGX support for FreeBSD.

SGX kernel driver developed and tested on FreeBSD 12.0-CURRENT. Intel SGX SDK can be built on both 11-STABLE and 12.0-CURRENT.

1. Apply the kernel-support from https://reviews.freebsd.org/D11113 and rebuild kernel.

% sudo kldload sgx

2. Build SGX SDK

% sudo pkg install protobuf gmake gcc48
% git clone https://github.com/bukinr/freebsd-sgx.git
% cd freebsd-sgx
% sh download_prebuilt.sh
% gmake -j4
% sudo gmake install

3. Run SGX service daemon

% sudo ./build/linux/aesm_service

4. Build and run sample application

% cd SampleCode/LocalAttestation/
% gmake
% sudo ./app

Papers Intel SGX Explained