Intel's Software Guard Extensions, instructions increasing the security of application code and data, providing more protection from disclosure or modification. https://software.intel.com/en-us/sgx
Intel's SGX allows user-level and OS code to define "enclaves", private regions of memory, whose contents are protected and can't be read or saved by any process outside the enclave itself, including processes running at higher privilege levels. It must be opted in to by the user through their BIOS settings on a supported system, as SGX is disabled by default, and is only available on selected Intel CPUs.
