topic Re:Remote Attestation Hybrid in Intel® Software Guard Extensions (Intel® SGX)

Remote Attestation Hybrid

Criston__Anna — Tue, 11 Aug 2020 14:55:33 GMT

Hi! I was wondering if there is any way of passing data from a not SGX-capable machine to an SGX-capable machine enclave without having the data go through the untrusted memory of the SGX machine.
I've searched around but could not find any projects on that. I know that remote attestation works for 2 SGX-capable machines to pass data from trusted memory to trusted memory. Is there any way to pass data from the untrusted memory of a not SGX-capable machine directly to the trusted memory of an SGX-capable machine (and vice versa)?

Thank you.

Re:Remote Attestation Hybrid

ChrisB_Intel — Thu, 13 Aug 2020 19:52:58 GMT

A relying party/remote server (not required at all to be SGX enabled) that attests a remote SGX enabled platform/enclave. It can then set up a secure channel to pass secrets directly in to the enclave memory. The secret is never in the clear between the relying party and the remote SGX enclave.

Please take a look at the links below:

https://software.intel.com/content/www/us/en/develop/articles/code-sample-intel-software-guard-extensions-remote-attestation-end-to-end-example.html

https://github.com/intel/sgx-ra-sample

Re:Remote Attestation Hybrid

JesusG_Intel — Wed, 19 Aug 2020 18:15:07 GMT

This thread will no longer be monitored since we have provided a solution. If you need any additional information from Intel, please submit a new question.