topic SGX DCAP 1.5 Driver Checksum Mismatch in Intel® Software Guard Extensions (Intel® SGX)

SGX DCAP 1.5 Driver Checksum Mismatch

Holodov__Dmitry — Thu, 12 Mar 2020 05:08:01 GMT

The drivers in the 1.4 and 1.5 SGX DCAP releases have the same version number, but the files do not match. Should I be worried that this is an indicator of compromise?

$ sha256sum DCAP-1.?/sgx_linux_x64_driver_1.21.bin
6b2b35697b166b9ac291569acbcff1b79c4cec1fa8dd1745391fed8401c40d95  DCAP-1.4/sgx_linux_x64_driver_1.21.bin
5d72a9844ce4f9343a6294e68b37dff73a9dc97ac78860a769481437cd9863b6  DCAP-1.5/sgx_linux_x64_driver_1.21.bin

Hello Dmitry,

JesusG_Intel — Thu, 12 Mar 2020 17:14:51 GMT

Hello Dmitry,

Those are the correct checksums and the files are not compromised. You can find the checksums in these files in the repositories:

https://download.01.org/intel-sgx/sgx-dcap/1.4/linux/SHA256SUM_dcap_1.4

https://download.01.org/intel-sgx/latest/dcap-latest/linux/SHA256SUM_dcap_1.5

The driver files are the same source code and the same version but they get rebuilt with the new DCAP releases so the hashes may be different.

Regards,

Jesus

Intel Customer Support