topic Question on Remote attestation Sample Code in Intel® Software Guard Extensions (Intel® SGX)

Question on Remote attestation Sample Code

Sam5 — Tue, 26 Jul 2016 06:38:20 GMT

Hi,

In the Remote Attestation flow, what is the difference between the Extended GID (returned by sgx_get_extended_epid_group_id) and GID (returned by sgx_ra_get_msg1)?

-Thanks

Hi Sam,

Surenthar_S_Intel — Tue, 26 Jul 2016 08:29:45 GMT

Hi Sam,

The extended group ID is used to enable flexible provisioning in SGX SDK 1.6

If the extended group ID = 0, then Intel is the attestation service for the device. Continue msg1 -> msg4 as normal.
If the extended group ID != 0, then a third party is providing the attestation service and the system was provisioned by the third party, so the messages need to follow that implementation.

The group ID (GID) in message 1 is the EPID group the device was assigned to in the provisioning process.

Thanks and Reagrds,
Surenthar Selvaraj

Thanks Surenthar ....

Sam5 — Tue, 26 Jul 2016 09:02:24 GMT

Thanks Surenthar ....