Support SM9 (cryptography standard) about ehsm HOT 5 OPEN

Does openssl support SM9?

from ehsm.

Does openssl support SM9?

it doesn't. But SM9 is implemented in GmSSL https://github.com/guanzhi/GmSSL. Should we use GmSSL in eHSM? @yang8621

from ehsm.

eHSM depends on a customized openssl: https://github.com/intel/intel-sgx-ssl/tree/support_tls.
It's forked from openssl but provides two functions:

1. SGX customization, aka syscall handling. 2. SGX-based attested TLS.

eHSM is not a libOS-based solution, so that Gmssl cannot be used directly.
SM9 has values in various use cases, as you mentioned. I will also do some homework on it. But currently, there are gaps to support it.

from ehsm.

Thanks for your reply. If I want to do this work, could you give me some advice? I'm a newbie for Intel SGX.

from ehsm.

With pleasure. The 1st thing is to build gmssl into sgx enclave.
You can refer to https://github.com/intel/linux-sgx/blob/master/SampleCode/SampleEnclave/Makefile, especially focus on the Enclave settings. Standard std files cannot be used, instead, only SGX supported headers can be used. SGX removes all syscall support inside enclave, so that you may encounter many compiling errors like get time, IO, or even printf() etc. You can either disable the unused functions, or rewrite the function by SGX SDK: send sgx ocall to the ROS.

from ehsm.