Article ID: 000059962 Content Type: Product Information & Documentation Last Reviewed: 07/31/2024

Where is the Protected File Located when Using "sgx_fopen_auto_key" Command in an Intel® Software Guard Extensions Enclave?

BUILT IN - ARTICLE INTRO SECOND COMPONENT
Summary

The first argument of the "sgx_fopen_auto_key" API specifies the full path of the file.

Description

Unable to determine the location of the protected file when using sgx_fopen_auto_key() and how to access the file from the untrusted application.

Resolution

According to the Intel® Software Guard Extensions (Intel® SGX) SDK Developer Reference Guide for Windows, the definition of sgx_fopen_auto_key is:

sgx_fopen_auto_key

The sgx_fopen_auto_key function creates or opens a protected file.

Syntax

SGX_FILE* sgx_fopen_auto_key(const char* filename, const char* mode);

Parameters

filename [in]: The name of the file to be created or opened.

The file path, which is where the file is located, is specified in the first argument, const char* filename. The API for sgx_fopen_auto_key behaves like its counterpart in C, fopen.

The protected file cannot be opened for reading or writing by the untrusted application because the file is encrypted with an enclave sealing key.

Refer to the Intel Protected File System Library section in the Intel SGX Developer Reference Guide for more details.

Additional information

 

  • The Intel SGX Developer Reference for Linux is in the Documentation folder of the latest release of the Intel® Software Guard Extensions SDK for Linux*.

Related Products

This article applies to 2 products