[QUESTION] Is there any ways or tools to prove that the program is running in a enclave? (not remote attestation)

[Ariel08081214]

Your Question

Hai. Is there any ways or tools to prove that the program is running in enclave and the memory is encrypted? (not remote attestation)

[Bonjourz]

Hi @Ariel08081214

1. To verify whether HyperEnclave has correctly isolated memory among different enclaves, you can try to modify HyperEnclave Driver, and read Enclave's memory. You will get General Protection error when performing such illegal access;
2. To verify whether the enclave's memory is encrypted, you can modify Hypervisor, read an encrypted memory region without hardware's memory decryption, and then you will get the ciphertext.