The enclave image is a binary blob in the enclave image file (EIF) format. Section type Format Description Kernel Binary A bzImage file Cmdline String The boot command line for the kernel Metadata JSON The build information, such as the kernel configuration and the Cargo and Docker versions used Ramdisk cpio The bootstrap ramfs, which includes the NSM driver and init file Ramdisk cpio The user space ramfs, which includes files from the Docker image Signature CBOR A vector of tuples in the form (certificate, signature) A running enclave can ask the Nitro Hypervisor to compute (measure) hashes of the enclave’s code and sign them with AWS’s private key, or more precisely with a certificate that is signed by a certificate that is signed by a certificate… that is signed by the AWS root…