OBLIVIOUS: Set this parameter to ON to perform model training and inference using data-oblivious algorithms (to mitigate access-pattern based side-channel attacks).įinally, we also provide options to build the library with LVI mitigation. This parameter requires OE_DEBUG to be set to 1. SIMULATE: Set this parameter to ON to build the enclave in simulation mode (for local development and testing, in case your machine does not support hardware enclaves). LOGGING: Set this parameter to ON to enable logging within the enclave. We also provide some additional configuration options:

More details on these parameters can be found here. OE_SECURITY_VERSION: Enclave security version number. OE_NUM_TCS: The number of enclave thread control structures this is the maximum number of concurrent threads that can execute within the enclave. OE_NUM_STACK_PAGES: The amount of stack memory (in pages) committed to the enclave. OE_NUM_HEAP_PAGES: The amount of heap memory (in pages) committed to the enclave this is the maximum amount of heap memory available to your enclave application. OE_DEBUG: Set this parameter to 0 to build the enclave in release mode, or 1 to build in debug mode. In addition, the following parameters are used by Open Enclave to configure the enclave build.

Th enclaves use this certificate to authenticate the clients. This is used to sign the enclave while building it.ĬA_CERT_FILE: Path to the file containing the root certificate. SIGNER_KEY_FILE: Path to the file containing the enclave developer’s private key. This is used during remote attestation to authenticate the enclaves. SIGNER_PUB_FILE: Path to the file containing the enclave developer’s public key. Configure the build parameters listed in CMakeLists.txt.ĬLIENT_LIST: This is a list of usernames of all parties in the collaboration.

Xgboost install linux