[QUESTION] 基于sgx SDK的应用程序是如何迁移到HyperEnclave上运行的？

[wujiening]

你好！@Bonjourz

根据主页readme中所述，HyperEnclave支持occlum和基于sgx SDK的代码。

sgx SDK的TEE应用在HyperEnclave上运行的原理是什么？是通过重新编译sgx SDK的TEE应用，并使用HyperEnclave的库替换了sgx SDK的库吗？还是使用HyperEnclave的驱动替换Intel SGX的驱动？上层SDK库依赖驱动中的相关实现？

[Bonjourz]

Hi @wujiening , thanks for your interest on HyperEnclave.

HyperEnclave provided the SGX ISA's emulation (e.g. ECREATE, EADD, EEXTNED .etc) so that TEE applications running atop on HyperEnclave can get the TEE environment similar to SGX's enclave.

For ENCLU, we need to modify the SGX SDK, replace the ENCLU with HyperCall;
For ENCLS, we need to modify the Drvier, replace the ENCLS with HyperCall. HyperEnclave Driver is open-sourced now, you can dive into it: https://github.com/asterinas/hyperenclave-driver.