Introduction to Intel SGX development

sgx The definition file *.edl

enclave {

	/* Quote external .edl*/
	from "sgx_tstdc.edl" import *;
	
	/* Safety zone function interface definition */
	trusted {
		public int sgx_sdkinit([in,size=iplen] unsigned char *ip,size_t iplen,[in,size=portlen] unsigned char *port, size_t portlen);
	};

	/* Definition of non safe zone function interface */
	untrusted {
		void ocall_print_string([in, string] const char *str);        
	};

};

Initialize the security zone

//ENCLAVE_FILE For secure dynamic library , Absolute paths can be used 
sgx_create_enclave(ENCLAVE_FILE, SGX_DEBUG_FLAG, &token, &token_updated, &eid, NULL);

Release the safety zone

sgx_destroy_enclave(eid);

Safe zone function call

// Having a return value char * type , The corresponding length should be passed into the string sizeof length , Such as incoming 0 It's in sgx The space not applied for in becomes NULL
sgx_sdkinit(eid,&i_ret,ip,iplen,port,portlen);

Chip true random number and sealed key encryption and decryption

sgx_read_rand		 random number 
		sgx_read_rand(buf, buflen);
sgx_seal_data		 Sealed key encryption 
		sgx_seal_data(0, NULL, key_len, key_buf, seal_len, (sgx_sealed_data_t*)seal_data);
sgx_unseal_data		 Seal key decryption 
		sgx_unseal_data((sgx_sealed_data_t*)seal_data, NULL, NULL, unseal_key, &len);