Can data on peripherals be obtained in enclave?

[feichuanshuo]

I hope to obtain sensor data in enclave to ensure data security！

[grg-haas]

Hi @feichuanshuo! While this is not supported yet, this feature is actually in progress. Stay tuned!

[feichuanshuo]

Can you provide a simple idea?

[acaldaya]

I'm also interested in this.

@feichuanshuo the straightforward method would be that the SM access the device on behalf of the Enclave. So you would need to provide API thought the stack to get access to that.
You can use existing Keystone SBIs as an example about how to do that:

keystone/sm/src/sm-sbi.c

Line 80 in 874b3d8

unsigned long sbi_sm_get_sealing_key(uintptr_t sealing_key, uintptr_t key_ident,

@grg-haas could you share the ideas that you are cooking?
like for instance, have you identified a third-party framework for managing the synchronization?

[grg-haas]

@feichuanshuo @acaldaya I've opened a proof-of-concept PR for this at #418!