savagaon
Joined 8 years ago
Karma
11
Submissions
2
Member since
May 3
Joined 8 years ago
You can find an overview of what enclaves are at https://asylo.dev/about/overview.html.
The security model of enclaves is as follows: Enclaves rely on the OS for their resource management/scheduling, however, the OS cannot compromise the enclave.
As to refactoring--it is really up to the developer. With sufficient POSIX support, an entire POSIX-compliant app can live inside an enclave. On the other hand, for security reasons, the developer may decide to refactor their application.