

Graphene SGX
Applications programmed for one system often do not work on another. Graphene bridges this gap by hoisting application-facing code from the operating system (OS) kernel into a userspace library. Graphene uses a platform adaptation layer (PAL) that is easy to implement on a new...
Cost / License
- Free
- Open Source (LGPL-3.0)
Platforms
- Linux
Features
Tags
Graphene SGX News & Activities
Recent activities
No activities found.
Graphene SGX information
What is Graphene SGX?
Applications programmed for one system often do not work on another. Graphene bridges this gap by hoisting application-facing code from the operating system (OS) kernel into a userspace library. Graphene uses a platform adaptation layer (PAL) that is easy to implement on a new host system. As long as a system implements the PAL interface, all of POSIX/Linux will follow.
Graphene is a library OS, similar to a unikernel. Compared to running a complete guest OS in a virtual machine (VM), Graphene is much lighter weight. Work is ongoing to integrate Graphene with Docker containers.
A particular use case for Graphene is Intel® Software Guard Extensions (Intel® SGX), where applications do not work out-of-the-box. Graphene solves this problem, with the added security benefits. Graphene can serve as a compatibility layer on other platforms.


