Bringing Intel SGX to the Rust Ecosystem
summary
Claims a working Rust SGX SDK (MesaLock SGX) that combines Intel SGX and Rust to protect secrets, ports much of libstd and popular crates, and provides an x86_64-unknown-linux-sgx Xargo target. Shows concrete builds: a drop‑in OpenSSL wrapper, a port of rusty‑machine, rust‑protobuf, and a webassembly interpreter running inside enclaves. Notes SGX memory/paging limits, uses Intel SDK bridges for syscalls, and cites a genome workload that shrinks 30 GB to hundreds of MB and processes it in ~7 seconds.
AI-written summary · about
chapters (16)
- 0:00Start
- 2:25Outline
- 3:22Intel SGX - Memory Encryption Engine
- 5:38Intel SGX - Runtime Execution
- 6:38Intel SGX - Remote Attestation
- 8:47User-Algo-Cloud, who to trust?
- 13:47In the past: Written in C/C++
- 16:04Assemble the partitioned
- 17:05Intel SGX API? Easy!
- 17:58Principles of hybrid memory-safe architecture
- 20:47Selected Challenges
- 22:13Exception as an example
- 23:57thread_local!
- 24:57SgxMutex as an Example
- 26:51Import sgx_tstd
- 32:37Going to be success WebAssembly Interpreter
related talks
46mState of Intel SGX in Linux
32mSecure Container with SGX: Protecting Secret in Cloud Environment
48mSGX Secure Enclaves in Practice: Security and Crypto Review
32mSecure Container with SGX: Protecting Secret in Cloud Environment
15mSecured Routines: Language-based Construction of Trusted Execution Environments
23mThe Guard's Dilemma: Efficient Code-Reuse Attacks Against Intel SGX
19mAttestation and identity provisioning to Intel SGX workloads
40mConfidential Computing Across Multiple Clouds and Platforms: Project Enarx