►
Description
Yu Ding from Baidu X Labs today
is securely joining the fray
to rust'ly enclave
your bits to behave
that's a big deal for securitay
In this talk, we introduce Rust SGX SDK (future code name MesaLock SGX), which can protect secrets from most attacks by combining the power of Intel SGX and Rust. Intel SGX is the next generation trusted computing technique supported in almost all recent Intel CPUs. It provides strong security guarantees and uses a completely different os/threading model, but lacks memory safety guarantees. We show how we ported Rust std and a series of fundamental and popular Rust crates into the Rust-SGX world. What’s more, we support Xargo by providing a new target platform as x86_64-unknown-linux-sgx.
(Limerick by @llogiq)
https://paris.rustfest.eu/sessions/mesalock-sgx
A
B
B
We
only
want
to
bring
interest
reacts
to
rust,
but
on
the
road
we
found
that
we
can
bring
the
entire
here
as
stack
to
rust
and
by
the
help
of
Russell
we
wrap
wrap.
It
wrap
it
to
a
drop
in
replacement
for
open
SSL
and
for
the
more
we
implement
a
set
of
Linux
users
based
applications,
and
we
named
named
them
as
methyl
ink
and
a
mess
lock
they're,
both
open
source
on
github
and
can
be
used
directly
in
IOT
devices
and
Android
systems
and
Baidu
product
teams
like
them
very
much.
B
This
is
my
outline
for
today.
So
this
is
the
first
time
I'm
talked
to
the
rust
community.
Instead
of
the
security
guys,
so
I
will
spend
a
little
more
time
on
interest,
reacts
and
discuss
why
rust
is
SGX
best
friend.
So
next
I
will
use
easiest
the
most
easy,
simple
print
line
as
an
example
show
how
I
support
print
line
in
ICS.
B
So
next
is
the
most
challenge
challenging
part:
the
live
STD
and
we
pour
the
whole
entire
live
STD
to
SGX,
name
as
as
Jax
and
underscore
trusted
STD,
and
the
last
two
sections
tells
you
how
to
port
more
crates
to
as
Jax
and
show
some
masterpieces
already
built
in
as
Jax.
So
what
is
s
GX
s?
Gx
is
an
CPU
mode
which
can
protect
data.
I
authorize
the
data
access,
which
means
that,
for
example,
in
the
past,
the
OS
kernel
and
vmm
can
get
access
to
the
applications.
B
Memory
without
notice,
the
application,
but
with
with
sjx
enabled
the
application
can
protect
its
own
memory
in
the
small
yellow
boxes
named
as
as
GS
and
clave,
and
in
this
way,
no
matter
how
the
OS
tries.
He
cannot
get
read
or
read
access
to
the
unlived
memory.
This
is
enforced
by
the
in-house
memory
encryption
engine,
the
memory
kim
changjun
is
implemented
as
Hardware
in
inside
as
if
you
and
it
guarantees
the
map,
access
control
by
the
paid,
paging
information
and
yeah.
B
So
the
is
how
the
ICS
unclaimed
for
protects,
avocations
memory,
but
it
has
a
strong
limitation
it
because
the
the
supported
memory
size
is
quite
small.
On
each
platform,
only
128
gigabytes
of
physical
memory
can
be
used
for
the
as
you
as
Jackson
clave,
but
don't
worry.
Intel
has
implemented
a
software
by
a
page
fault
based
making
a
mapping
mechanism
which
can
swap
in
and
swap
out
the
memories
between
trusted,
128,
gigabytes
and
untrusted.
B
What
no
matter,
how
much
memory
you
have,
but
it
will
be
a
little
bit
slow
if
you
trigger
a
page
fault
and
what
kernel
driver
get
get
the
page
in
and
decrypt
that's
a
little
bit
more
performance
overhead.
So
so
how
do
the
SGS
and
clave
works
normally
when
they,
as
Jax
application,
can
be
splitted
to
two
parts
that
I'm
trusted
a
part
of
an
app
and
a
trusted
part
of
an
app
in
the
untrusted
part
of
app?
B
The
Linux
read:
keep
accusing
and
QA
eco,
which
goes
through
the
cockades
of
a
stress
and
clave
and
start
execution
in
the
trusted
part
or
SGS
Enclave
and
final
fan
finally
returns
to
the
untrusted
part
of
F.
So
it
works
like
a
blocks
is
blocked
Cisco,
but
it
does
not
escalate
the
privilege
to
ring
zero.
It's
it
only
keeps
its
own
privilege
in
Greene
Street,
so
as
Jax
provide
not
only
the
memory
encryption
engine,
but
also
the
remoted
hesitation
ability,
which
means
that
everyone
can
remote
remote
a
test
if
the
SJS
enclave
is
launched
correctly.
B
The
code
inside
Enclave
is
the
one
I
want
to
launch.
This
is
guaranteed
by
the
Seaview
mechanism,
as
if
you
will
automatically
calculate
the
char
some
of
the
loaded
enclaved
memory
and
returns
you
a
as
the
result
and
you
during
the
compile,
compile
asian.
You
can
calculate
the
hash
value
by
yourself
and
you
can
verify
if
the
use
these
two
values
are
equal
are
at
the
identical
and
the
the
the
hash
value
calculated
by
hardware
is
assigned
by
Intel.
So
you
can
verify
if
the
report
is
correctly
signed
by
Intel.
B
If
the
report
is
valid
and
and
the
hash
value
is
identical,
so
you
can
trust
the
the
Enclave
and
put
your
secrets
through
the
enclaves
and
start
a
calculation.
So
the
remote
attestation
mechanism
can
guarantee
if
a
ICS
Enclave
is
initialized
correctly
and
whether
the
platform
satisfies
the
security
requirement.
What
is
the
platform
in
s?
B
B
For
the
newer
network,
he
can't
trust
a
cloud
service
provider,
because
cloud
service
provider
would
steal
the
truing
model
from
their
program
and,
and
he
cannot
trust
user,
because
user
can
still
can
make
arbitrary
numbers
of
quick
hurry
to
their
to
their
neural
network
and
get
the
model
out
and
user
from
the
other
side.
The
user
can
now
trust
both
of
them,
because
the
user
has
the
data.
He
cannot
trust
anyone
and
the
cloud
for
service
provider
cannot
transpose
because
they
can
DDoS
the
cloud
service
so
how
to
solve
it.
B
B
This
is
designed
to
be
a
high
performance
memory,
encryption
engine
and
with
the
ability
to
do
local
and
remote
attestation
and
it's
the
best
choice
for
my
algorithm,
your
data,
whoever
CPU
the
problem
and
this
path:
choice
for
SMC
and
previously
we
have
PowerDVD
and
offers
over
ssl,
which
supports
as
shares
in
their
portal
for
the
power
DVDs.
They
use
ICS
and
clave
to
process
raw
video
stream
directly
from
the
blu-ray
disc
and
this
decrypted
decrypt
the
data
stream
and
output
to
screen
for
wolf
SSL.
B
So
this
is
easy
to
for
you
guys
to
understand,
because
you
C
or
C++
code,
there
are
always
partial
flows,
use
a
freeze,
a
memory,
corruption,
vulnerabilities
and
as
Jax
codes.
That's
need
memory
safety
because,
as
Jax
is
designed
to
process
privacy
and
sensitive
data,
so
as
yes
definitely
means
memory,
safety
guarantees,
so
I
start
the
research
in
SGX
and
want
to
solve
the
memory
safety
counties
in
an
innovation
way
which
applies
new
technology
of
program,
language
to
the
ICS
programming
model.
So
I
tried
three
different
languages:
the
colon
rest
and
Swift.
B
First
I,
look
into
:
I've
tried
my
best
to
understand
how
:
works,
but
I
found
that
:
requires
everything,
every
process
as
a
go
routine
and
it
keeps
switching
between
the
goroutines
and
so
called
Co
machine
in
a
in
Co
Co.
What
appear
as
a
cue?
Yes,
it's
a
job
queue
as
dynamically
scheduling
cannot
be
implemented
in
as
GX
because
inside
as
Jax.
We
cannot
make
this
cause
cannot
decide
whether
or
not
wish
myself
should
get
get
off
the
CPU.
So
echo
is
almost
impossible
for
as
Jax
and
for
Swift.
B
B
Thank
you.
So
in
the
past
what
Intel
provide
us
is
that
an
Intel
says
that
every
part
could
be
written
in
C
or
C++,
but
with
our
work
we
can
use
rest
for
Graham
the
untrusted
app
and
unclaimed
for
the
contexts
which
they
are.
They
are
the
foundation.
Library
is
provided
by
Intel
and
I,
don't
want
to
waste
their
efforts
because
they
have
plenty
of
experienced
engineers
working
on
that.
So,
if,
if
I
do,
if
I
work
to
some
working
on
that,
I
cannot
guarantee
that
I
can
upgrade
it.
B
According
to
the
Intel
engineers
work,
so
I
plan
to
build
everything
on
top
of
the
Intel
SGX
accounts,
which
libraries.
So
here
it
comes
another
question
in
the
past.
The
application
is
a
Intel
application.
We
never
split
it
to
two
parts,
but
now
we
have
to
split
into
two
parts,
though
the
untrusted
part
and
trusted
parts
where
the
trusted
part
components
cannot
make
Cisco's
and
can
only
excute
in
a
limited
size
of
memory.
So
this
is
a
key
question.
We
we
need
partition
yeah
that
myself.
So
that's
a
key
question
and
I.
B
Whenever
I
talk
partition
the
concept
to
developers
in
by
do
they
they
say
that
I,
don't
want
know
these
details.
These
are
burden
to
me
so
I
don't
know
how
to
talk
to
them,
but
I
think
you
guys
me
understand.
I
have
to
everyone
who
want
to
write
an
STX
application.
He
means
what
secret
he
wants
to
protect
and
what
code
should
be
guaranteed
for
his
integrity.
That's
a
key
question.
So,
let's
assume
that
we
have
a
correct
partition
for
now.
So
after
the
partition,
how
do
we
assemble
them
together?
B
So
it
is
easy
to
understand
for
the
untrusted
app
we
just
build
build
it
together
with
our
as
Jack's
and
trusted
runtime
service
create
and
linked
together
with
leap,
SGX
underscore
and
untrusted
runtime
service
dot,
a
and
some
other
stuffs
for
the
trusted
part.
It
a
is
a
static
library
because,
as
Jax
does
not
support
dynamic
loading,
so
every
everything
is
linked.
Aesthetically
we
build
our
SDK
as
a
set
of
static
libraries
and
and
developers
read
their
own
as
jazz
and
claves
and
generated
a
Lib
enclave
dot.
B
A
we
link
everything
together
as
a
shared
object
and
use
the
as
Jack's
i2o
by
Intel,
and
provide
a
signing
key
and
finally
create
a
sign
ISO
and
in
the
very
first
beginning,
as
I,
successfully
support
the
interest.
Jax
API
by
directly
is
wrapping
the
their
api's
with
rest
interface,
and
here
is
a
simple,
simple
stack,
which
depend
finally
depends
on
Intel's
SDK
yeah.
So
here
here
is
a
key
question.
B
B
B
B
B
So
the
steps
is
easy.
First,
I
need
the
petition
for
the
first
step
of
addition
and
e2
defines
the
boundary.
It
is
defined
using
a
edie,
arrow,
syntax
defined
by
Intel
very
similar
to
C,
and
the
first
lies
are
entrusted
which
says
that
is
a
Oh
call
function
which
it
is
enables
a
a
code
instead,
as
GS
and
clave
make
outside
call
to
the
to
the
untrusted
world
right
to
the
STD
out
and
get
back
to
the
transit
world
and
inside
the
trusted
codes.
B
I
can
expand
the
macro
actually
I
copied
the
coast
from
leave
a
sticky
to
as
jxt
STD
and
finally
implement
such
a
certain
function
and
such
a
structure
very
almost
the
same
as
the
lib
STD
and
finally,
after
across
the
boundary
of
trusted
untrusted
the
in
the
untrusted
world.
The
the
code
way
is
very
much
simple.
Yes,
so
put
everything
together
in
inside
the
Enclave
I
implement
the
macro
and
defines
the
edge
and
finally
implement
the
the
OCO.
B
So
the
most
challenging
part
is,
as
TD
is
too
much
large
and
as
takes
us
about
half
a
year
to
for
this,
create
the
challenge
here.
I
selected
part
of
tournaments
here
for
examples.
Reading,
as
you
can
see
from
the
previous
slide,
as
Jax
does
not
has
a
isolated
shredding
mechanism.
The
Eco
function
is
treated
as
something
like
blocked
syscall
and
it
does
not
have
this
training
model.
B
It
only
has
a
setting
policy
we
which
decide
on
each
eco,
whether
or
not
you
get
the
same
in
enclaves
TCB
so
and
another
challenge
is
from
the
leaves
each
time
in
her
sleep
c
is
quite
small
because
its
support
it
doesn't
support
too
much
any
cisco.
So
it
only
has
a
very
limited
set
of
features
and
as
Jack's
it
supports
a
weird
or
or
something
like
vectorized
exception
handling
mechanism
very
different
from
rust.
So
challenges
are
a
lot
they
are.
B
Exceptionally,
as
Jax
is
quite
complex,
but
it's
very
very
similar
to
to
the
operating
systems
exception.
It
will
first
use
a
trampoline
to
trap,
to
aware
to
OS
kernel
and
do
with
the
host
do
visa,
such
as
page
fold
and
get
back
to
the
Han
clave.
One
example
is
that
in
SGS
and
clave
there
is
no
CPUID
instruction.
B
If
we
excuse
such
an
instruction,
it
will
trap
a
fault
and
to
the
OS
and
if
we
register
such
a
such
a
exception
Handler
and
it
will
transfer
the
control
control
flow
to
our
register
Handler
and
do
the
handle
handles
the
safety
ID
instruction
and
get
back
to
the
unclaimed,
a
continuous
execution.
So
this
is
entirely
different
from
rust
exception.
B
So
another
example
is
as
Jax
mutex
Linux,
the
mutex
important
implementation
will
finally
fall
to
leave.
Sees
piece
ran
new
text,
but
as
Jax
we
don't
have
pizza.
So
Intel
provides
an
alternative
solution
in
named
as
as
Jax
read,
mutex
so
I
implement
the
re-implement,
the
mutex
dot
RS
and
which
caused
to
the
as
Jax
thread
mutex
in
needs.
We
finally
make
FF
I
caused
to
inherit.
Ap
is
in
this
way
we
implement
mutex
as
as
Jack's
mutex.
B
The
reason
why
I
didn't
directly
name
as
new
tags
is
that
I
want
programmers
to
know
that
they
are
using
Intel's
mutex
instead
of
common
piece
revenue
tax.
So
that's
that's
how
the
liebe
city
works.
So
next
I
would
tell
you
guys
how
to
pour
existing
projects
to
Russ
SGX
and
protect
your
data
and
privacy,
but
before
that
I
want
to
I.
Want
you
guys
to
know
before
port
anything
we
need
to
partition
it.
B
For
now
we
support
either
the
post,
the
cargo
settings
and
the
XR
go
I,
don't
know
how
to
pronounce
in
Chinese.
We
call
it
choco,
because
I
extends
for
char,
so,
but
now
whatever
so
in
cargo
settings,
it
is
a
no
STD
environment.
The
creator
is
named
as
jxt
STD
and
what
you
need
to
do
is
to
exterminate
as
as
yet
gsdd
as
STD
and
add.
Another
prelude
include,
add
the
header
and
it
supports
rust,
able
and
rust
nightly.
B
But
in
XR
go
it's
say:
the
environment
does
include
STD,
so
the
create
is
different
with
his
name
as
TD
and
verse.
Number
zero
point,
zero
point,
zero
and
is,
and
it
it
has
a
customized
this
route
and
it's
support
nightly
only
because
I
XR
go
only
support
nightly,
but
we
want
the
act
and
leave
be
stable.
So
we
hacked
that
x,
XR,
go
and
shipped
with
a
customized
XR
go
with
our
code
project
and.
B
Forest
reacts
features
in
Russ
SGX.
We
support
both
the
Linux
side,
for
example
the
Linux
file
system
access.
We
support
them
and
Intel
provides
another
called
as
Jack's
file
system,
that's
a
encrypted
file
system
and
we
support
and
post
before
you
decide
to
use
file
system.
You
have
to
choose
between
the
Linux
file
system
and
the
STX
file
system.
B
This
happens
to
time,
which
Linux
time
or
the
as
Jack's
time
as
UX
time
is
guaranteed
to
be
true
from
India
me
mechanism,
and
here
I
listed
some
of
the
masterpieces
of
rasa
SGS
first
at
least
the
create
sported
by
myself,
for
example,
the
rusty
machine,
because,
as
the
early
stage
of
this
year
or
last
year,
people
are
talking
about
a
I
and
I
poured
part
of
I
select,
one
famous
Marshall
learning
library
cause
rusty
machine.
It
has
a
clean
dependency
with.
B
Linear
algebra
are
create,
I
can
I
can
port,
and
that
makes
a
sect
made
made
success
and
the
second
I
poured
the
Russell
set
to
as
Jax
and
provides
a
course
imposed
to
show
how
to
create
a
here
as
server
and
client
in
as
Jack's
and
uses.
Jack's
protect
the
TOS
context,
and
then
someone
write
email
to
me
say
that
I
need
program.
B
Ok
and
I
pour
the
product
to
as
Jack's
so
photograph
I
related
to
some
partitions,
because
part
of
the
protobuf
should
be
implemented
in
the
untrusted
world
and
a
part
of
the
probe
should
be
work
in
the
trusted
world
and
and
4:30
is
the
it's
one
of
my
favorite
create
and
personally
I
wouldn't
use
Russ
proto
before
civilization,
I
would
use
30.
And
finally,
last
week,
I
made
the
web
assembly
interpreter
worked
perfectly
in
STS
and
that's
what
I
believe
will
be
success
in
near
future
and
some
winning
stories.
B
In
last
year,
I
I
participate
in
the
I
competition
hosted
in
US,
and
the
CEA
from
France
won
the
trophy
in
a
17
and
the
successfully
compressed
the
search
gigabytes
of
genome
data.
To
hundreds
of
me,
megabeth
and
transfer
it
to
the
authorized
enclave,
lock-free,
a
hashmap
and
finally,
the
size
of
the
hash.
Math
is
only
seven
gigabytes,
even
less
than
the
l3
cache
of
the
processor
and
the
process.
They
process
this
30
gigabytes
of
data
within
seconds
I.
B
Remember
it
seven
seconds,
so
they
won't
the
trophy
and
they
build
their
application
on
the
Rath
SGX
framework
and
that
this
is
the
first
winning
story
of
Russa
SGX.
They
beat
a
set
of
a
bunch
of
teams
using
C
and
C++,
and
another
winning
story
is
from
my
previous
lab
at
UC
Berkeley
and
they
poured
a
entire
reserve.
Mbm
called
Sputnik
the
EVM
to
the
SGS
Enclave
and
write
a
smart
contract
protocol,
the
consent,
some
consensus
mechanisms
they
implement
they
implement
correctly
and
make
the
smart
contract
system
work.
B
Perfectly
honest
react,
Russ,
SES
and
at
last
I
last
week,
I
finally
make
it
work.
Make
the
web
assembly
interpreter
works
in
ICS
and
clave,
which
means
that
I
can
put
W
as
T
web
assembly
to
the
highest
rank
lave
and
and
send
some
execution
requests
to
the
web
assembly
interpreter.
And
it
can
calculate
the
evaluates
the
results
and
return
to
return
to
Elantra
a
word
or
either
Sande
to
remote,
using
secure
layer,
transportation
and
it
will
be
a.
B
Winning
story
because,
as
Jax
in
the
past
can
is
designed
to
build
a
customized
set
of
trust
computing
base,
but
with
the
help
of
webassembly
interpreter
it
can
execute
every
popular
language,
because
every
popular
compiler
can
generate
web
assembly
as
a
target
platform.
So
we
can
run
everything
in
as
your
exam
safe
now.
So
here's
the
summary
and
I
have
some
problems.
Love
you
hon.
First
is
cargo
test,
as
Jax
has
a
different
system
settings,
so
it
does
not
support
a
couple
tests
and
for
char
go.