ProGrads 卷別
計算機結構與作業系統(B)
選擇國立臺灣大學 2022 · 考試 · 第 16 題
考科計算機組織與結構
(5 pts) Recent hardware architectural extensions include the support for Trusted Execution Environment (TEE). Hardware isolates the software running in the TEE from the outside attackers. Intel provides the hardware support called Software Guard Extensions (SGX) that allows programs to run in its TEE called enclave in userspace. Intel SGX encrypts the enclave's code and data in CPU registers and RAM memory. Attackers that control another application or privileged systems software such as an operating system can only read or write encrypted code and data of the enclave. Which of the following are true?
（複選；至少一個正確選項，每個選項獨立計分。）
- (A)Intel SGX ensures that the software running in the TEE can never crash.
- (B)As the OS kernel is involved when loading the application's binary into the enclave, Intel SGX supports remote attestation to authenticate the binary to ensure the application's safety.
- (C)It is possible to run an entire OS kernel such as Linux in the SGX enclave.
- (D)Although the enclave is encrypted by the Intel SGX hardware, an attacker residing in the OS kernel could still modify the enclave's page tables to affect the enclave's execution.
- (E)To support encrypting the enclave's secrets for persistent storage, the SGX enclave could use a persistent hardware-based encryption key to securely encrypt and store its sensitive data in a way that ensures the data can be retrieved only when the trusted environment is restored.