

Graphene SGX
Applications programmed for one system often do not work on another. Graphene bridges this gap by hoisting application-facing code from the operating system (OS) kernel into a userspace library. Graphene uses a platform adaptation layer (PAL) that is easy to implement on a new...
Cost / License
- Free
- Open Source (LGPL-3.0)
Platforms
- Linux
Features
Tags
- golem
Graphene SGX News & Activities
Recent activities
Graphene SGX information
What is Graphene SGX?
Applications programmed for one system often do not work on another. Graphene bridges this gap by hoisting application-facing code from the operating system (OS) kernel into a userspace library. Graphene uses a platform adaptation layer (PAL) that is easy to implement on a new host system. As long as a system implements the PAL interface, all of POSIX/Linux will follow.
Graphene is a library OS, similar to a unikernel. Compared to running a complete guest OS in a virtual machine (VM), Graphene is much lighter weight. Work is ongoing to integrate Graphene with Docker containers.
A particular use case for Graphene is Intel® Software Guard Extensions (Intel® SGX), where applications do not work out-of-the-box. Graphene solves this problem, with the added security benefits. Graphene can serve as a compatibility layer on other platforms.


