Open Enclave (OE) is an SDK for building enclave applications in C and C++. An enclave application partitions itself into two components:
- An untrusted component (called the host) and
- A trusted component (called the enclave).
An enclave is a protected memory region that provides confidentiality for data and code execution. It is an instance of a Trusted Execution Environment (TEE) which is usually secured by hardware, for example, Intel Software Guard Extensions (SGX).
This SDK aims to generalize the development of enclave applications across TEEs from different hardware vendors. The current implementation provides support for Intel SGX as well as preview support for OP-TEE OS on ARM TrustZone. As an open source project, this SDK also strives to provide a transparent solution that is agnostic to specific vendors, service providers and choice of operating systems.
If you would like to start developing apps with the preview Open Enclave SDK release, start here for instructions to install and use the SDK package:
- Ubuntu 18.04 with SGX hardware
- Ubuntu 16.04 with SGX hardware
- Ubuntu 18.04 or 16.04 in simulation mode
- Windows Release Package coming soon
If you would like to run Ubuntu 16.04 or Ubuntu 18.04 in a Hyper-V VM on SGX capable hardware, see Setting up a Linux Hyper-V VM on Windows with SGX Support.
If you would like to modify and build the Open Enclave SDK from sources, refer to the documents for getting started.
The Open Enclave SDK provides preview support for the Open Portable TEE OS (OP-TEE OS). OP-TEE is an operating system for TEE's that implement a traditional kernel-mode and user-mode execution environment. It runs on A-profile ARM systems that support ARM TrustZone. As a result, the Open Enclave SDK can be leveraged to target these systems as well.
For an overview of the SDK's support for OP-TEE OS as well as links to getting started guides, see Open Enclave SDK for OP-TEE OS.
This project welcomes contributions and suggestions. Most contributions require you to agree to a Contributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us the rights to use your contribution. For details, see Contributing to Open Enclave.
This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact opencode@microsoft.com with any additional questions or comments.
See the Development Guide for details about contributing code to this project, such as coding style and development processes. Also see our Governance Model for how we maintain the project.
This project is released under the MIT License.