topic SGX and protected video path in Intel® Software Guard Extensions (Intel® SGX)

SGX and protected video path

sasha_n_ — Tue, 25 Jul 2017 16:41:20 GMT

Hi,

Does SGX platform provides mechanisms for protected video path (for DRM purposes)? So basically code in enclave decrypting protected media samples, then passing them securely to trusted decoders for rendering.

Thanks,

Sasha

Hi,

Anusha_K_Intel — Wed, 26 Jul 2017 11:33:00 GMT

Hi,

Yes, SGX can be used as a DRM protection scheme.Recently, Intel researchers have demonstrated the DRM protection capability of Intel SGX by designing a prototype Secure Video Conferencing (SVC) application , which protects the video path by using SGX and Intel’s Protected Audio Video Path (PAVP).

The detailed process is given below in the section 3.3 and 3.3.2

https://software.intel.com/en-us/articles/using-innovative-instructions-to-create-trustworthy-software-solutions

Thanks Anusha, have a few

sasha_n_ — Wed, 26 Jul 2017 13:10:03 GMT

Thanks Anusha, have a few followup questions:

- I see that codecs are included in enclave, are those "secure" codecs part of the platform / PAVP framework?

- Is there any PAVP API available so that our enclave code can utilize protected output feature as demonstrated in 3.3.2 ?

- Which platforms support PAVP ?

- Does PAVP also provide info / logic for handling connected output devices, for example: allow output only if HDCP 2.2+ is engaged over HDMI cable etc.

Kind regards,

Sasha

Hi,

Anusha_K_Intel — Thu, 27 Jul 2017 13:24:08 GMT

Hi,

Protected Audio Video Path (PAVP) protects the data path within a computer during video playback (e.g., Blu-ray discs). It is supported by newer chipsets (e.g. Intel G45) and operating systems (since Windows Vista).

Please refer to the below link.

https://software.intel.com/en-us/forums/intel-software-guard-extensions-intel-sgx/topic/676149