如何由CPU保护您的数据和隐私不被恶意代码窃取？英特尔SGX基础介绍

// demo.edl

enclave {

        // Add your definition of "secret_t" here

        trusted {

                 public void get_secret([out] secret_t* secret);

        };

        untrusted {

        // This OCALL is for illustration purposes only.

        // It should not be used in a real enclave,

        // unless it is during the development phase

        // for debugging purposes.

        void dump_secret([in] const secret_t* secret);

        };

};