topic Thanks for your info.... in Intel® Software Guard Extensions (Intel® SGX)

Signature Padding in SGX

SAM_R_2 — Thu, 08 Sep 2016 06:07:14 GMT

Hi,

From this white paper : https://software.intel.com/en-us/articles/innovative-technology-for-cpu-based-attestation-and-sealing

If you look at Table 2-2 in the reference, it mentions that the padding in the SECS is derived from the signature (presumably from the SIGSTRUCT).

- Thanks

Hi Sam,

Surenthar_S_Intel — Thu, 08 Sep 2016 06:41:05 GMT

Hi Sam,

Signature Padding is included as an additional defense against padding attacks on the SIGSTRUCT signature. The signature padding being included in SGX keys results in the key being bound to a correctly composed signature over the enclave’s SIGSTRUCT and not key that signed the contents of SIGSTRUCT [MRSIGNER] or ISVSVN.

Thanks and Regards,
Surenthar Selvaraj

Thanks for your info....

SAM_R_2 — Thu, 08 Sep 2016 06:49:55 GMT

Thanks for your info....