Measuring a secure enclave

A method comprising:

• invoking a first instruction to create a secure enclave;
• invoking a second instruction to add a region to the secure enclave;
• and
• invoking a third instruction to measure a first subregion of the region.

A system comprising:

• a system memory;
• and
• a processor including
• an instruction unit to receive a first instruction, a second instruction, and a third instruction;
• and
• an execution unit to execute the first instruction, the second instruction, and the third instruction, wherein execution of the first instruction includes initializing a measurement field in a control structure of a secure enclave with an initial value, execution of the second instruction includes adding a region to the secure enclave from the system memory, and execution of the third instruction includes measuring a subregion of the region.