hyperledger / hyperledger/fabric-private-chaincode

Enable LVI mitigation for SGX

Open
#430 2 comments 0 reactions 0 assignees View on GitHub
feature
Dominant language
Go
Stars
174
Forks
98
Avg merge
2d 21h
Merged PRs (30d)
1

Description

**Is your feature request related to a problem? Please describe.**

To harden the enclaves, it would be good to protect them against LVI attacks.

**Describe the solution you'd like**

Follow the steps in Section "Enable CVE-2020-0551 Mitigation" of the "Enclave Development Basics" Chapter (page 86ff in the [Intel® Software Guard Extensions (Intel® SGX) SDK for Linux* OS -- Developer Reference ](https://download.01.org/intel-sgx/latest/linux-latest/docs/Intel_SGX_Developer_Reference_Linux_2.10_Open_Source.pdf))
[Note: this relies for ubuntu 18.04 on the upstream binutils For docker, we install intel's version distributed as part of the SDK in `/opt/intel/sgxsdk.extras/external/toolset/ubuntu18.04` ...]

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.