Computation offloading to hardware accelerators in Intel SGX and Gramine Library OS. (arXiv:2203.01813v1 [cs.CR])

The Intel Software Guard Extensions (SGX) technology enables applications to
run in an isolated SGX enclave environment, with elevated confidentiality and
integrity guarantees. Gramine Library OS facilitates execution of existing
unmodified applications in SGX enclaves, requiring only an accompanying
manifest file that describes the application's security posture and
configuration. However, Intel SGX is a CPU-only technology, thus Gramine
currently supports CPU-only workloads. To enable a broader class of
applications that offload computations to hardware accelerators - GPU offload,
NIC offload, …

hardware intel library os sgx