Index

Symbols

--allow-debug-enclave gramine-sgx-ias-verify-report command line option --allow-outdated-tcb gramine-sgx-ias-verify-report command line option --api-key gramine-sgx-ias-request command line option --cert-path gramine-sgx-ias-request command line option --define <key>=<value> gramine-manifest command line option --depfile depfile gramine-sgx-sign command line option --force gramine-sgx-gen-private-key command line option --gid gramine-sgx-ias-request command line option --help gramine-sgx-ias-request command line option gramine-sgx-ias-verify-report command line option gramine-sgx-quote-dump command line option --ias-pubkey gramine-sgx-ias-verify-report command line option --isv-prod-id gramine-sgx-ias-verify-report command line option --isv-svn gramine-sgx-ias-verify-report command line option --key key_file gramine-sgx-sign command line option --libpal libpal_path gramine-sgx-sign command line option --manifest manifest_file gramine-sgx-sign command line option --mr-enclave gramine-sgx-ias-verify-report command line option --mr-signer gramine-sgx-ias-verify-report command line option --msb gramine-sgx-ias-request command line option gramine-sgx-ias-verify-report command line option gramine-sgx-quote-dump command line option --no-force gramine-sgx-gen-private-key command line option --nonce gramine-sgx-ias-request command line option gramine-sgx-ias-verify-report command line option --output output_manifest gramine-sgx-sign command line option --output token_file gramine-sgx-get-token command line option --quiet gramine-sgx-gen-private-key command line option gramine-sgx-get-token command line option gramine-sgx-sign command line option is-sgx-available command line option --quote-path gramine-sgx-ias-request command line option --report-data gramine-sgx-ias-verify-report command line option --report-path gramine-sgx-ias-request command line option gramine-sgx-ias-verify-report command line option --report-url gramine-sgx-ias-request command line option --sig sigstruct_file gramine-sgx-get-token command line option --sig-path gramine-sgx-ias-request command line option gramine-sgx-ias-verify-report command line option --sigfile sigfile gramine-sgx-sign command line option --sigrl-path gramine-sgx-ias-request command line option --sigrl-url gramine-sgx-ias-request command line option --verbose gramine-sgx-gen-private-key command line option gramine-sgx-get-token command line option gramine-sgx-ias-request command line option gramine-sgx-ias-verify-report command line option gramine-sgx-sign command line option

-c gramine-sgx-ias-request command line option -d gramine-sgx-ias-verify-report command line option -D <key>=<value> gramine-manifest command line option -E gramine-sgx-ias-verify-report command line option -f gramine-sgx-gen-private-key command line option -g gramine-sgx-ias-request command line option -h gramine-sgx-ias-request command line option gramine-sgx-ias-verify-report command line option gramine-sgx-quote-dump command line option -i gramine-sgx-ias-request command line option gramine-sgx-ias-verify-report command line option -k gramine-sgx-ias-request command line option -k key_file gramine-sgx-sign command line option -l libpal_path gramine-sgx-sign command line option -m gramine-sgx-ias-request command line option gramine-sgx-ias-verify-report command line option gramine-sgx-quote-dump command line option -m manifest_file gramine-sgx-sign command line option -n gramine-sgx-ias-request command line option gramine-sgx-ias-verify-report command line option -o gramine-sgx-ias-verify-report command line option -o output_manifest gramine-sgx-sign command line option -o token_file gramine-sgx-get-token command line option -P gramine-sgx-ias-verify-report command line option -q gramine-sgx-gen-private-key command line option gramine-sgx-get-token command line option gramine-sgx-ias-request command line option gramine-sgx-sign command line option -R gramine-sgx-ias-request command line option gramine-sgx-ias-verify-report command line option -r gramine-sgx-ias-request command line option gramine-sgx-ias-verify-report command line option -S gramine-sgx-ias-request command line option gramine-sgx-ias-verify-report command line option -s gramine-sgx-ias-request command line option gramine-sgx-ias-verify-report command line option -s sigfile gramine-sgx-sign command line option -s sigstruct_file gramine-sgx-get-token command line option -V gramine-sgx-ias-verify-report command line option -v gramine-sgx-gen-private-key command line option gramine-sgx-get-token command line option gramine-sgx-ias-request command line option gramine-sgx-ias-verify-report command line option gramine-sgx-sign command line option

_

_PAL_STREAM_ATTR (C struct)

A

AE AEP AESM

AEX Architectural Enclave Service Manager Architectural Enclaves Attestation

B

built-in function gramine.runtimedir() ldd() python.get_path() python.get_paths()

D

Data Center Attestation Primitives

DCAP

E

EDMM Enclave Enclave Dynamic Memory Management Enclave Page Cache Enclave Page Cache Map Enhanced Privacy Identification

Enhanced Privacy Identifier EPC EPCM EPID event_wait_with_retry (C function) expand_all_trusted_files() (graminelibos.Manifest method)

F

FLC	Flexible Launch Control from_template() (graminelibos.Manifest class method)

G

get_dependencies() (graminelibos.Manifest method) gramine-manifest command line option --define <key>=<value> -D <key>=<value> gramine-sgx-gen-private-key command line option --force --no-force --quiet --verbose -f -q -v gramine-sgx-get-token command line option --output token_file --quiet --sig sigstruct_file --verbose -o token_file -q -s sigstruct_file -v gramine-sgx-ias-request command line option --api-key --cert-path --gid --help --msb --nonce --quote-path --report-path --report-url --sig-path --sigrl-path --sigrl-url --verbose -c -g -h -i -k -m -n -q -r -R -S -s -v report sigrl gramine-sgx-ias-verify-report command line option --allow-debug-enclave --allow-outdated-tcb --help --ias-pubkey --isv-prod-id --isv-svn --mr-enclave --mr-signer --msb --nonce --report-data --report-path --sig-path --verbose -d -E -h -i -m -n -o -P -r -R -s -S -v -V

gramine-sgx-quote-dump command line option --help --msb -h -m gramine-sgx-sign command line option --depfile depfile --key key_file --libpal libpal_path --manifest manifest_file --output output_manifest --quiet --sigfile sigfile --verbose -k key_file -l libpal_path -m manifest_file -o output_manifest -q -s sigfile -v gramine.libos (built-in variable) gramine.runtimedir() built-in function

I

IAS Intel Attestation Service Intel Provisioning Certification Service Intel Provisioning Service

Intel SGX SDK Intel SGX Software Development Kit IPS is-sgx-available command line option --quiet

L

Launch Enclave ldd() built-in function

LE Local Attestation

M

Manifest (class in graminelibos) ManifestError (class in graminelibos)

MEE Memory Encryption Engine

O

OCALL

P

PAL pal_access (C enum) pal_access.PAL_ACCESS_BOUND (C enumerator) pal_access.PAL_ACCESS_RDONLY (C enumerator) pal_access.PAL_ACCESS_RDWR (C enumerator) pal_access.PAL_ACCESS_WRONLY (C enumerator) pal_alloc_flags_t (C type) PAL_CONTEXT (C struct) (C type) pal_cpu_info (C struct) pal_create_mode (C enum) pal_create_mode.PAL_CREATE_ALWAYS (C enumerator) pal_create_mode.PAL_CREATE_IGNORED (C enumerator) pal_create_mode.PAL_CREATE_NEVER (C enumerator) pal_create_mode.PAL_CREATE_TRY (C enumerator) pal_delete_mode (C enum) pal_delete_mode.PAL_DELETE_ALL (C enumerator) pal_delete_mode.PAL_DELETE_READ (C enumerator) pal_delete_mode.PAL_DELETE_WRITE (C enumerator) pal_event (C enum) pal_event.PAL_EVENT_ARITHMETIC_ERROR (C enumerator) pal_event.PAL_EVENT_ILLEGAL (C enumerator) pal_event.PAL_EVENT_INTERRUPTED (C enumerator) pal_event.PAL_EVENT_MEMFAULT (C enumerator) pal_event.PAL_EVENT_NO_EVENT (C enumerator) pal_event.PAL_EVENT_NUM_BOUND (C enumerator) pal_event.PAL_EVENT_QUIT (C enumerator) pal_event_handler_t (C type) PAL_IDX (C type) pal_iovec (C struct) pal_prot_flags_t (C type) pal_public_state (C struct) pal_public_state.alloc_align (C var) pal_public_state.disable_aslr (C var) pal_public_state.first_thread (C var) pal_public_state.log_level (C var) pal_public_state.manifest_root (C var) pal_public_state.parent_process (C var) pal_public_state.preloaded_ranges (C var) pal_public_state.user_address_end (C var) pal_public_state.user_address_start (C var) pal_segment_reg (C enum) pal_segment_reg.PAL_SEGMENT_FS (C enumerator) pal_segment_reg.PAL_SEGMENT_GS (C enumerator) pal_share_flags_t (C type) pal_socket_addr (C struct) pal_socket_domain (C enum) pal_socket_domain.PAL_DISCONNECT (C enumerator) pal_socket_domain.PAL_IPV4 (C enumerator) pal_socket_domain.PAL_IPV6 (C enumerator) pal_socket_type (C enum) pal_socket_type.PAL_SOCKET_TCP (C enumerator) pal_socket_type.PAL_SOCKET_UDP (C enumerator) PAL_STREAM_ATTR (C type) pal_stream_options_t (C type) pal_topo_info (C struct) pal_wait_flags_t (C type) PalAttestationQuote (C function) PalAttestationReport (C function) PalCpuIdRetrieve (C function) PalDebugLog (C function)

PalEventClear (C function) PalEventCreate (C function) PalEventSet (C function) PalEventWait (C function) PalGetPalPublicState (C function) PalGetSpecialKey (C function) PalMemoryAvailableQuota (C function) PalObjectClose (C function) PalProcessCreate (C function) PalProcessExit (C function) PalRandomBitsRead (C function) PalReceiveHandle (C function) PalSegmentBaseGet (C function) PalSegmentBaseSet (C function) PalSendHandle (C function) PalSetExceptionHandler (C function) PalSocketAccept (C function) PalSocketBind (C function) PalSocketConnect (C function) PalSocketCreate (C function) PalSocketListen (C function) PalSocketRecv (C function) PalSocketSend (C function) PalStreamAttributesQuery (C function) PalStreamAttributesQueryByHandle (C function) PalStreamAttributesSetByHandle (C function) PalStreamChangeName (C function) PalStreamDelete (C function) PalStreamFlush (C function) PalStreamMap (C function) PalStreamOpen (C function) PalStreamRead (C function) PalStreamSetLength (C function) PalStreamsWaitEvents (C function) PalStreamUnmap (C function) PalStreamWaitForClient (C function) PalStreamWrite (C function) PalSystemTimeQuery (C function) PalThreadCreate (C function) PalThreadExit (C function) PalThreadResume (C function) PalThreadYieldExecution (C function) PalVirtualMemoryAlloc (C function) PalVirtualMemoryFree (C function) PalVirtualMemoryProtect (C function) PCE PCS PE PRM Processor Reserved Memory Provisioning Certification Enclave Provisioning Enclave PSW python.distlib (built-in variable) python.get_path() built-in function python.get_paths() built-in function python.implementation (built-in variable) python.platstdlib (built-in variable) python.purelib (built-in variable) python.stdlib (built-in variable)

Q

QE	Quoting Enclave

R

RA-TLS Remote Attestation

report gramine-sgx-ias-request command line option

S

SDK Secret Provisioning SECS Secure Channel Security Version Number Service Provider ID SGX SGX Enclave Control Structure SGX Platform Software

SGX Quote SGX Report SGX SDK SGX2 sigrl gramine-sgx-ias-request command line option SPID SSA State Save Area SVN

T

TCB TCS TEE

Thread Control Block Thread Control Structure Trusted Computing Base Trusted Execution Environment