1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
use raw_cpuid::{CpuId, SgxSectionInfo};
use std::fmt;
pub struct SgxCpuInfo(CpuId);
impl SgxCpuInfo {
pub fn new() -> Self {
Self { 0: CpuId::new() }
}
}
impl Into<CpuId> for SgxCpuInfo {
fn into(self) -> CpuId {
self.0
}
}
impl fmt::Display for SgxCpuInfo {
fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
writeln!(f, "# CPU features")?;
let feature_info = self
.0
.get_feature_info()
.expect("Cannot get feature information");
writeln!(f, "stepping {}", feature_info.stepping_id())?;
writeln!(
f,
"model {} (extended {})",
feature_info.model_id(),
feature_info.extended_model_id()
)?;
writeln!(
f,
"family {} (extended {})",
feature_info.family_id(),
feature_info.extended_family_id()
)?;
writeln!(f, "{} SMX support", emoji(feature_info.has_smx()))?;
writeln!(f, "\n# Intel SGX capabilities")?;
let extended_features = self
.0
.get_extended_feature_info()
.expect("Cannot get extended features information");
writeln!(f, "{} SGX availability", emoji(extended_features.has_sgx()))?;
writeln!(
f,
"{} SGX launch control configuration",
emoji(extended_features.has_sgx_lc())
)?;
let sgx_info = self.0.get_sgx_info().expect("Cannot get SGX information");
writeln!(f, "{} SGX 1 support", emoji(sgx_info.has_sgx1()))?;
write!(f, "{} SGX 2 support", emoji(sgx_info.has_sgx2()))?;
Ok(())
}
}
fn emoji(b: bool) -> String {
if b {
"✅".to_owned()
} else {
"❌".to_owned()
}
}
impl fmt::Debug for SgxCpuInfo {
fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
writeln!(f, "# CPU features")?;
let feature_info = self
.0
.get_feature_info()
.expect("Cannot get feature information");
writeln!(f, "{:#02x?}", feature_info)?;
writeln!(f, "stepping {}", feature_info.stepping_id())?;
writeln!(f, "model {}", feature_info.model_id())?;
writeln!(f, "extended model {}", feature_info.extended_model_id())?;
writeln!(f, "family {}", feature_info.family_id())?;
writeln!(f, "extended family {}", feature_info.extended_family_id())?;
writeln!(f, "SMX support {}", feature_info.has_smx())?;
writeln!(f, "\n# Extended feature bits")?;
let extended_features = self
.0
.get_extended_feature_info()
.expect("Cannot get extended features information");
writeln!(f, "{:#02x?}", extended_features)?;
writeln!(f, "SGX available: {}", extended_features.has_sgx())?;
writeln!(f, "SGX launch control: {}", extended_features.has_sgx_lc())?;
writeln!(f, "\n# Intel SGX capabilities")?;
writeln!(f, "\n## Sub-leaf 0 (ECX=0)")?;
let sgx_info = self.0.get_sgx_info().expect("Cannot get SGX information");
writeln!(f, "{:#02x?}", sgx_info)?;
writeln!(f, "SGX 1 supported: {}", sgx_info.has_sgx1())?;
writeln!(f, "SGX 2 supported: {}", sgx_info.has_sgx2())?;
writeln!(
f,
"MaxEnclaveSize_Not64: {:#02x}",
sgx_info.max_enclave_size_non_64bit()
)?;
writeln!(
f,
"MaxEnclaveSize_64: {:#02x}",
sgx_info.max_enclave_size_64bit()
)?;
writeln!(f, "\n## Sub-leaf 1 (ECX=1)")?;
let (eax, ecx) = sgx_info.secs_attributes();
write!(f, "eax: {:#02x?}, ebx: 0, ecx: {:#02x?}, edx: 0", eax, ecx)?;
for (idx, SgxSectionInfo::Epc(epc_section)) in sgx_info.iter().enumerate() {
writeln!(f, "\nSub-leaf {} (ECX={})", idx + 2, idx + 2)?;
writeln!(
f,
"EPC (Enclave Page Cache) section:\n{:#02x?}",
epc_section
)?;
writeln!(
f,
"physical base address: {:#02x?}",
epc_section.physical_base()
)?;
write!(
f,
"size of EPC section in Processor Reserved Memory: {} MB",
epc_section.size() / 1_048_576
)?;
}
Ok(())
}
}