Instructions and logic to branch the secure enclave process and establish a child enclave in the secure enclave page cache

摘要

Instructions and logic branch the process to establish a child enclave in a secure enclave page cache (EPC). The instructions specify secure storage addresses assigned to the parent and child process enclaves to store secure enclave control structure (SECS) data, application data, code, and the like. The processor includes an EPC that stores enclave data for the parent and child processes. The parent embodiment may be implemented or the system may execute instructions to copy the parent SECS to the child secure storage and initialize the unique child ID and link to the parent SECS / ID. Good. The child embodiment may be implemented, or the system copies the parent enclave page to the child enclave (both enclaves have the same key) and, if interrupted, part the EPC mapping entry. May be set to automatic completion and an instruction to record the page state of the child enclave may be executed. Therefore, copying can be resumed.