From dev-return-203-archive-asf-public=cust-asf.ponee.io@tvm.apache.org Wed Apr 10 21:07:31 2019 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [207.244.88.153]) by mx-eu-01.ponee.io (Postfix) with SMTP id DAC90180626 for ; Wed, 10 Apr 2019 23:07:30 +0200 (CEST) Received: (qmail 81831 invoked by uid 500); 10 Apr 2019 21:07:30 -0000 Mailing-List: contact dev-help@tvm.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@tvm.apache.org Delivered-To: mailing list dev@tvm.apache.org Received: (qmail 81763 invoked by uid 99); 10 Apr 2019 21:07:29 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 10 Apr 2019 21:07:29 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 5A7C2180710 for ; Wed, 10 Apr 2019 21:07:29 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 0.899 X-Spam-Level: X-Spam-Status: No, score=0.899 tagged_above=-999 required=6.31 tests=[DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=2, MAILING_LIST_MULTI=-1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd3-us-west.apache.org (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mx1-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id Gy5S3ERs_mPa for ; Wed, 10 Apr 2019 21:07:27 +0000 (UTC) Received: from mail-ed1-f49.google.com (mail-ed1-f49.google.com [209.85.208.49]) by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with ESMTPS id 39471611F6 for ; Wed, 10 Apr 2019 21:07:27 +0000 (UTC) Received: by mail-ed1-f49.google.com with SMTP id d13so3296374edr.5 for ; Wed, 10 Apr 2019 14:07:27 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:delivered-to:date:dkim-signature:from:reply-to :to:cc:message-id:in-reply-to:references:subject:mime-version :content-transfer-encoding:precedence:list-id:list-archive:list-post :list-unsubscribe; bh=OG3TG51kGZFpfQt6+V2mIeIh6mToNEXrTh9poiwPMbM=; b=SqgaEFPaR3jtmwlN7eJMAzffWKPh0+qkDuCVfPYm89FLFRvrkYSqay47zWBn86C4BN 50/s3AIDHZFSDPmMULnqrhREhNTuRsQEptRt3B00NbmDGgfR83KugDFm7o/qz6HPQ+YK cFKpiT/+6netq8B5Dq4olBEHf4scQYDjCr1IWi8L6rJbyiG2AVwWHlp4NWXXVD0EK2N5 0ChQQy9JsVSK0MxsV4Nbn6bMBFtkXoM+W+sSsJQ+ZR8W/OMD9o+UoVmYRs+vD8Royske VCBhPB7TuYhbk7vOUfPYWn0jQ4hUxC/zSncWdOc5uNNg8B6KdMKjtJf5ETqVcTCOqVWX nuUg== X-Gm-Message-State: APjAAAXljfaZDvLtjUENIqLj24zW+Tvx+xwCVjr2RyLFrUPugSraP3A8 21Ugs+euZ5ninn3tRUIF3wRaN3Fl108VQ52e9oQkPTlE46EnRC4= X-Received: by 2002:a50:acc6:: with SMTP id x64mr543340edc.141.1554930440860; Wed, 10 Apr 2019 14:07:20 -0700 (PDT) X-Forwarded-To: dev@tvm.apache.org X-Forwarded-For: tvm.archiver@gmail.com dev@tvm.apache.org Delivered-To: tvm.archiver@gmail.com Received: by 2002:a50:cf4b:0:0:0:0:0 with SMTP id d11csp6562313edk; Wed, 10 Apr 2019 14:07:19 -0700 (PDT) X-Google-Smtp-Source: APXvYqws9s4Obse2u+kb9CkYZxDQI7xV3ZtDoIQTYkKCfrZQGQC7ZVkoMygPcPG33wv4qgjQwBtG X-Received: by 2002:a37:5805:: with SMTP id m5mr35505403qkb.136.1554930439109; Wed, 10 Apr 2019 14:07:19 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1554930439; cv=none; d=google.com; s=arc-20160816; b=J/9CWSNgNo9VKkxmw22xd3dJX+d9jKQSZ+9agU6/Cmbsrha5iOk8r3Bly/WK1KNUkT mAbrMOF3bx3LVOBkOG1uM2EGvnO6wNtR2XXVX+CrxkgGDqS+SDiIBStVaRPPaeY+pnvL PJoGUpGjsQyrmffEag652rFYnuDlUUHR0DFgsnioyYeohJ61UWxEP1R8d1HXpTOVY0/3 apCoLxJM51CIQN1PQPzp3NImXJzhzz5vJLape3pQNDgoreBazbmx+Hz0phlzjjywYzS9 ekUucczJ84yskt8nrbr9ioliGRhVOcr7BdMmQYoAth04NsO7grOPnP2cltfWtTrwFjo/ YN7A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-unsubscribe:list-post:list-archive:list-id:precedence :content-transfer-encoding:mime-version:subject:references :in-reply-to:message-id:cc:to:reply-to:from:dkim-signature:date; bh=OG3TG51kGZFpfQt6+V2mIeIh6mToNEXrTh9poiwPMbM=; b=Z+flnj6DSvdCf1mUuaPszsBll0nkc+yKDFcGVY1tBADNn5MOU73IRI5jhAzlDqbRY7 bfQ3ZJyjihi8/MqaOnfS6tLx5nfcCSIqf6sEIHVsf/5GSLpMLqwU4K1pxAooUtIO1/Rz k9s1ehBAQVyGby1gC6UUy8GqsuJ2UCvqn9ev9+GrQt9mP4/C9H8GWnK2vMCGp7Tc2RgM DdBRK27OyOPpVb9Cg0a+hrSEupZtTw84zXj1I8SKWR5tcXz+j24MRkp3H8bntEIk1zIQ MNwrjjkM5DD7EKhdPNodkP6E/4TflQSJdmpJ5puPMsYMoRH/Sxy0hQ06QJZmEnJuETND 8YeA== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass (test mode) header.i=@github.com header.s=pf2014 header.b=DCiAtR8W; spf=pass (google.com: domain of noreply@github.com designates 192.30.252.192 as permitted sender) smtp.mailfrom=noreply@github.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=github.com Received: from out-1.smtp.github.com (out-1.smtp.github.com. [192.30.252.192]) by mx.google.com with ESMTPS id r25si2830309qvc.91.2019.04.10.14.07.18 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 10 Apr 2019 14:07:19 -0700 (PDT) Received-SPF: pass (google.com: domain of noreply@github.com designates 192.30.252.192 as permitted sender) client-ip=192.30.252.192; Authentication-Results: mx.google.com; dkim=pass (test mode) header.i=@github.com header.s=pf2014 header.b=DCiAtR8W; spf=pass (google.com: domain of noreply@github.com designates 192.30.252.192 as permitted sender) smtp.mailfrom=noreply@github.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=github.com Date: Wed, 10 Apr 2019 14:07:18 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1554930438; bh=OG3TG51kGZFpfQt6+V2mIeIh6mToNEXrTh9poiwPMbM=; h=Date:From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=DCiAtR8WiPyH9tzKRYBCpzgxcESd0qch8eovFpVIE5DBwCyUj4FTp4HdecxPMrCYo WMp1EmltKD3AZk4TNzQRUfkZaNSz2Z5xVRe1gLTzl3qYgqB6MnithUKBLKJGHnxd5B pDTHRiiiSwNgdRpNpk3W6U0mE3vX8Je6daFUvbNQ= From: Nick Hynes Reply-To: dmlc/tvm To: dmlc/tvm Cc: Subscribed Message-ID: In-Reply-To: References: Subject: Re: [dmlc/tvm] [RFC][SGX] Use Fortanix EDP instead of rust-sgx-sdk (#2887) Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5cae5b06773d7_7273fcbb5cd45b818173e"; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Sender: nhynes X-GitHub-Recipient: tvm-archiver X-GitHub-Reason: subscribed List-Archive: https://github.com/dmlc/tvm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: tvm.archiver@gmail.com ----==_mimepart_5cae5b06773d7_7273fcbb5cd45b818173e Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Okay, it's been two weeks on this RFC, so I'm going to prepare a pros/cons summary of the discussion so far in preparation for further action. Regarding the proposal to **replace SGX support in TVM with Fortanix**: **Pros** * tightly integrated into Rust ecosystem, which gives support for more crates as well as a significantly simpler build process * better performance due to low overhead enclave entry/exit * better auditing of usercalls than [eo]calls; better auditing of Rust `std` * easier to build new functionality like RPCs * easier to debug enclaves (e.g., working backtraces, `println!`, `panic!`) **Cons** * malicious operator could deny availability by blocking network access * end user needs to know that data sent outside of the enclave must go through a secure channel I'd be glad to leave our current SGX infrastructure in place except that it adds maintenance burden as we upgrade our `tvm` crate. Even if the toolchain were robust enough to be tested in CI, we would still want to use Rust's own toolchain as the primary means for SGX support. Thus, unless anyone has any strong objections, we will deprecate `rust-sgx-sdk` in favor of `x86_64-fortanix-unknown-sgx` as proposed in #2885. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/dmlc/tvm/issues/2887#issuecomment-481865630 ----==_mimepart_5cae5b06773d7_7273fcbb5cd45b818173e--