Master Thesis: TresorSGX

In my last year at university (2015-2016) I developed a linux kernel module which secures the Linux Crypto API using the Intel Software Guard Extensions. That was not a trivial task because multiple difficulties occured during the design and implementation. In the end the result was pretty solid and I was nominated for the CAST-Förderpreis IT-Sicherheit 2016 in Darmstadt. ...

December 15, 2016 · 7 min · 1461 words · Lars

How to print memory as hex to console, syslog, kernellog.

Currently I am developing Linux Kernel modules and normal user-mode applications in parallel. I needed a function which prints the content of a char array to the console, the syslog and the kernel log. ...

April 1, 2016 · 4 min · 682 words · Lars

Create and Execute an Intel SGX Enclave

Intel released its SGX SDK for Windows to the public. They included the launch enclave, which is required to start own enclaves. ...

January 5, 2016 · 5 min · 1008 words · Lars

Modify, compile and execute a Linux Kernel in QEMU

I wanted to modify the Linux Kernel and execute it in QEMU. After multiple hours of searching the web, reading poor guides, tracking debian package bugs and hacking I finally found a way to do that. In the end it is quite simple… ...

November 30, 2015 · 2 min · 332 words · Lars
Intel SGX - Theory vs Reality

Intel SGX - Theory vs Reality

On September 26th 2013, Intel published the Intel Software Guard Extensions programming reference. They added 19 new instructions which allows the creation and execution of an trusted “enclave” on an untrusted host. Some great benefits are coming with that technology. ...

October 23, 2015 · 6 min · 1118 words · Lars