Dual Remote Attestation

Elephant — Sun, 05 Nov 2017 07:52:27 GMT

Hi,

In the SGX Developer's Manual, the example code for remote attestation is that the Service Provider need to attest a client enclave before it provisions a secret to that enclave. If the Service Provider also runs an enclave and that the client would want to attest that enclave, is there a more efficient way to do dual attestation other than going through the remote attestation protocol (msg1-msg4) twice?

Thanks!

Kind Regards,
Elephant

Hi Elephant:

you_w_ — Mon, 06 Nov 2017 01:14:28 GMT

Hi Elephant:

One way is that service provider get it's quote and sent it to IAS, once get the attestation report SP can save it. If a client need to attest SP, in client side, client can check the validation of report with intel's public key, and then do the rest processes of remote attestation.

Regards

You

topic Hi Elephant: in Intel® Software Guard Extensions (Intel® SGX)

Dual Remote Attestation

Hi Elephant: