Intel® Software Guard Extensions SSL

Introduction

The Intel® Software Guard Extensions SSL (Intel® SGX SSL) cryptographic library is intended to provide cryptographic services for Intel® Software Guard Extensions (SGX) enclave applications. The Intel® SGX SSL cryptographic library is based on the underlying OpenSSL* Open Source project, providing a full-strength general purpose cryptography library.

License

See License.txt for details.

Documentation

• For details on library architecture: Architecture overview
• For details on using the libraries, please refer to the:
  • Linux developer guide
  • Windows developer guide

Build Intel® SGX SSL package

Windows

Prerequisites

• Microsoft Visual Studio 2015.
• 7-Zip
• Perl
• NASM (Netwide Assembler)
• Intel(R) SGX SDK.
• Intel(R) SGX PSW.
• Intel(R) SGX driver. (Note: 7-Zip, Perl, NASM need to be included in machine's PATH variable)

To build Intel® SGX SSL package in Windows OS:

1. Download OpenSSL package into openssl_source/ directory. (tar.gz package, e.g. openssl-1.1.0e.tar.gz)
2. Download and install latest SGX SDK from Intel Developer Zone. You can find installation guide from the same website.
3. Change the directory to the SGXSSL path and enter the following command:

build_all.cmd <OPENSSL_VERSION> [default == openssl-1.1.0g]

This will build the Intel® SGX SSL libraries (libsgx_tsgxssl.lib, libsgx_usgxssl.lib, libsgx_tsgxssl_crypto.lib), which can be found in package/lib/{Win32|X64}/{debug|release}/.

Linux

Prerequisites

• Perl
• Intel(R) SGX SDK.
• Intel(R) SGX PSW.
• Intel(R) SGX driver.

To build Intel® SGX SSL package in Linux OS:

1. Download OpenSSL package into openssl_source/ directory. (tar.gz package, e.g. openssl-1.1.0e.tar.gz)
2. Download and install latest SGX SDK from 01.org. You can find installation guide from the same website.
3. Update the SGX_SDK_PATH variable to the path where SGX SDK is installed in build_sgxssl.sh.
4. Change the directory to the SGXSSL path and enter the following command:

build_sgxssl.sh

This will build the Intel® SGX SSL libraries (libsgx_tsgxssl.a, libsgx_usgxssl.a, libsgx_tsgxssl_crypto.a), which can be found in package/lib64/{debug|release}/.