\HeadingLevelB{Software Design}
\label{sec:software}

Sanctum's chain of trust, discussed in \S~\ref{sec:chain_of_trust}, diverges
significantly from SGX. Sanctum replaces SGX's microcode with a software security
monitor that runs at a higher privilege level than the hypervisor and the OS.
On \mbox{RISC-V}, the security monitor runs at machine level. The Sanctum design only
uses one privileged enclave, the signing enclave, which behaves similarly to
SGX's Quoting Enclave.

\input{text/sanctum/software/mroot.tex}

\input{text/sanctum/software/monitor.tex}

\input{text/sanctum/software/eviction.tex}
