Index

Symbols

--build-arg gsc-build command line option gsc-build-graphene command line option --define <key>=<value>, -D <key>=<value> graphene-manifest command line option --help gsc command line option --insecure-args gsc-build command line option --no-cache gsc-build command line option gsc-build-graphene command line option --quiet is_sgx_available command line option --rm gsc-build command line option gsc-build-graphene command line option -a, --advisory-path ias_request command line option -c gsc-build command line option gsc-build-graphene command line option gsc-sign-image command line option -c, --cert-path ias_request command line option -d gsc-build command line option gsc-build-graphene command line option -E, --mr-enclave verify_ias_report command line option -f gsc-build-graphene command line option -g, --gid ias_request command line option -h, --help ias_request command line option quote_dump command line option verify_ias_report command line option -i, --ias-pubkey verify_ias_report command line option

-i, --sigrl-path ias_request command line option -k, --api-key ias_request command line option -L gsc-build command line option gsc-build-graphene command line option -m, --msb ias_request command line option quote_dump command line option verify_ias_report command line option -n, --nonce ias_request command line option verify_ias_report command line option -o, --allow-outdated-tcb verify_ias_report command line option -P, --isv-prod-id verify_ias_report command line option -q, --quote-path ias_request command line option -R, --report-data verify_ias_report command line option -r, --report-path ias_request command line option verify_ias_report command line option -R, --report-url ias_request command line option -S, --mr-signer verify_ias_report command line option -s, --sig-path ias_request command line option verify_ias_report command line option -S, --sigrl-url ias_request command line option -V, --isv-svn verify_ias_report command line option -v, --verbose ias_request command line option verify_ias_report command line option

A

AE AEP AEX APP.MANIFEST gsc-build command line option

Architectural Enclaves ARGUMENTS docker command line option Attestation

D

Data Center Attestation Primitives DCAP DkAttestationQuote (C function) DkAttestationReport (C function) DkCpuIdRetrieve (C function) DkDebugLog (C function) DkEventClear (C function) DkEventCreate (C function) DkEventSet (C function) DkEventWait (C function) DkGetPalControl (C function) DkMemoryAvailableQuota (C function) DkObjectClose (C function) DkProcessCreate (C function) DkProcessExit (C function) DkRandomBitsRead (C function) DkReceiveHandle (C function) DkSegmentRegisterGet (C function) DkSegmentRegisterSet (C function) DkSendHandle (C function) DkSetExceptionHandler (C function) DkSetProtectedFilesKey (C function) DkStreamAttributesQuery (C function) DkStreamAttributesQueryByHandle (C function)

DkStreamAttributesSetByHandle (C function) DkStreamChangeName (C function) DkStreamDelete (C function) DkStreamFlush (C function) DkStreamGetName (C function) DkStreamMap (C function) DkStreamOpen (C function) DkStreamRead (C function) DkStreamSetLength (C function) DkStreamsWaitEvents (C function) DkStreamUnmap (C function) DkStreamWaitForClient (C function) DkStreamWrite (C function) DkSystemTimeQuery (C function) DkThreadCreate (C function) DkThreadExit (C function) DkThreadResume (C function) DkThreadYieldExecution (C function) DkVirtualMemoryAlloc (C function) DkVirtualMemoryFree (C function) DkVirtualMemoryProtect (C function) docker command line option ARGUMENTS IMAGE-NAME OPTIONS

E

EDMM Enclave Enclave Dynamic Memory Management Enclave Page Cache Enclave Page Cache Map Enhanced Privacy Identification

Enhanced Privacy Identifier environment variable GSC_PAL, [1] SGX, [1] EPC EPCM EPID

F

FLC	Flexible Launch Control

G

graphene-manifest command line option --define <key>=<value>, -D <key>=<value> graphene.libos (built-in variable) graphene.runtimedir() (built-in function) gsc command line option --help gsc-build command line option --build-arg --insecure-args --no-cache --rm -L -c -d APP.MANIFEST IMAGE-NAME

gsc-build-graphene command line option --build-arg --no-cache --rm -L -c -d -f IMAGE-NAME gsc-info-image command line option IMAGE-NAME gsc-sign-image command line option -c IMAGE-NAME KEY-FILE GSC_PAL

I

IAS ias_request command line option -R, --report-url -S, --sigrl-url -a, --advisory-path -c, --cert-path -g, --gid -h, --help -i, --sigrl-path -k, --api-key -m, --msb -n, --nonce -q, --quote-path -r, --report-path -s, --sig-path -v, --verbose report sigrl

IMAGE-NAME docker command line option gsc-build command line option gsc-build-graphene command line option gsc-info-image command line option gsc-sign-image command line option Intel Attestation Service Intel Provisioning Certification Service Intel Provisioning Service Intel SGX SDK Intel SGX Software Development Kit IPS is_sgx_available command line option --quiet

K

KEY-FILE gsc-sign-image command line option

L

Launch Enclave ldd() (built-in function)

LE Local Attestation

M

MEE	Memory Encryption Engine

O

object_wait_with_retry (C function) OCALL

OPTIONS docker command line option

P

PAL pal_loader command line option SGX pal_main (C function) PCE PCS PE PRM Processor Reserved Memory

Provisioning Certification Enclave Provisioning Enclave PSW python.distlib (built-in variable) python.get_path() (built-in function) python.get_paths() (built-in function) python.implementation (built-in variable) python.platstdlib (built-in variable) python.purelib (built-in variable) python.stdlib (built-in variable)

Q

QE quote_dump command line option -h, --help -m, --msb

Quoting Enclave

R

RA-TLS Remote Attestation

report ias_request command line option

S

SDK Secret Provisioning SECS Secure Channel Security Version Number SGX, [1] pal_loader command line option SGX Enclave Control Structure SGX Platform Software

SGX Quote SGX Report SGX SDK SGX2 sigrl ias_request command line option SSA State Save Area SVN

T

TCB TCS TEE

Thread Control Block Thread Control Structure Trusted Computing Base Trusted Execution Environment

V

verify_ias_report command line option -E, --mr-enclave -P, --isv-prod-id -R, --report-data -S, --mr-signer -V, --isv-svn -h, --help -i, --ias-pubkey -m, --msb -n, --nonce -o, --allow-outdated-tcb -r, --report-path -s, --sig-path -v, --verbose