You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+9-9Lines changed: 9 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -10,11 +10,11 @@ Occlum and Gramine libOS solutions run the entire Java application inside the en
10
10
11
11
Teaclave Java TEE SDK provides seven components:
12
12
13
-
- Teaclave Java TEE SDK Host.jar, provides API to create and destroy enclave instances, enclave service loading and unloading, remote attestation quote generation, and verification.
13
+
- Teaclave Java TEE SDK Host Jar, provides API to create and destroy enclave instances, enclave service loading and unloading, remote attestation quote generation, and verification.
14
14
15
-
- Teaclave Java TEE SDK Enclave.jar, makes java native image runs in sgx enclave environment, and provides a stub between host and enclave for their interaction.
15
+
- Teaclave Java TEE SDK Enclave Jar, makes java native image runs in sgx enclave environment, and provides a stub between host and enclave for their interaction.
16
16
17
-
- Teaclave Java TEE SDK Common.jar, provides an annotation for application, which helps to register user-defined interface parameters' type information for native image reflection. Also, it defines the interface between host and enclave for underlying interaction, and it's transparent for the application.
17
+
- Teaclave Java TEE SDK Common Jar, provides an annotation for application, which helps to register user-defined interface parameters' type information for native image reflection. Also, it defines the interface between host and enclave for underlying interaction, and it's transparent for the application.
18
18
19
19
- Teaclave Java TEE SDK, provides all kinds of underlying JNI .so and building toolchains.
<palign="center">Teaclave Java TEE SDK Project Structure</p>
48
48
<br />
@@ -196,12 +196,12 @@ then we could run this sample: `OCCLUM_RELEASE_ENCLAVE=true java -cp host/target
196
196
197
197
## Four enclave types in Teaclave Java TEE SDK
198
198
199
-
### MOCK_IN_JVM mode
199
+
####MOCK_IN_JVM mode
200
200
201
201
`MOCK_IN_JVM` mode in Teaclave Java TEE SDK is a simulated mode, it doesn't need SGX hardware support. The host module and enclave module run in the same JVM environment.
202
202
In essence, it's an SPI mechanism between host and enclave parts.
203
203
204
-
### MOCK_IN_SVM mode
204
+
####MOCK_IN_SVM mode
205
205
206
206
`MOCK_IN_SVM` mode in Teaclave Java TEE SDK is also a simulated mode, it doesn't need SGX hardware support. Compare with `MOCK_IN_JVM` mode, the enclave submodule
207
207
will be compiled into a native image, and the host submodule run in a JVM environment. host part will load, create and invoke service defined in enclave by JNI native call.
@@ -210,7 +210,7 @@ will be compiled into a native image, and the host submodule run in a JVM enviro
210
210
211
211
`TEE_SDK` mode is a hardware mode, it must run on the platform with SGX2 hardware support. Compare with `MOCK_IN_SVM` mode, the enclave submodule also will be compiled into a native image, but it will be loaded and run in sgx enclave environment. The host part will run in a JVM environment, and both the host and enclave module will run in one process.
212
212
213
-
### EMBEDDED_LIB_OS mode
213
+
####EMBEDDED_LIB_OS mode
214
214
215
215
`EMBEDDED_LIB_OS` mode is also a hardware mode, it must run on the platform with SGX2 hardware support. Compare with `TEE_SDK` mode, the enclave submodule will be compiled into a jar file, and it will be loaded and run in an enclave with libOS Occlum, an inner alpine JVM runs based on this libOS. The host part runs in another JVM based on a normal environment. The two JVM instances co-existence and run in one process.
0 commit comments