On Wed, Dec 13, 2017 at 11:18:29PM +0000, Christopherson, Sean J wrote: > Resurrecting this thread now that I have a system with launch control > and have been able to measure the performance impact... > > Regenerating the EINIT token every time adds somewhere in the vicinity > of ~5% overhead to creating an enclave, versus generating a token once > and reusing it in each EINIT call. This isn't a huge issue since real > world usage models likely won't be re-launching enclaves at a high rate, > but it is measurable. We can cache tokens in future in the kernel space, can't we? /Jarkko
