topic Re:Question about Quote Enclave in Intel® Software Guard Extensions (Intel® SGX)

Question about Quote Enclave

hyunsoo — Thu, 26 Nov 2020 08:59:19 GMT

Theorically, Launch Enclave generates report and is conveyed to Quote Enclave. QE converts report to quote structure. In the RA example(https://github.com/intel/sgx-ra-sample), there is no related code with QE handling. I'm guessing that QE is initialized(launched) by calling `sgx_init_quote` and get the quote by calling `sgx_get_quote`.

So, the question is how QE is launched, and who is responsible for it?

Thank you

Re: Question about Quote Enclave

JesusG_Intel — Tue, 01 Dec 2020 21:34:41 GMT

Hello hyunsoo,

The Quoting Enclave is one of the architectural enclaves that gets installed with the Intel SGX Platforms Software (PSW). Specifically, the QE, and other architectural enclaves, are managed by the Architectural Enclave Service Manager (AESM).

You can find the code for the PSW here: https://github.com/intel/linux-sgx/tree/master/psw

Sincerely,

Jesus G.

Intel Customer Support

Re:Question about Quote Enclave

JesusG_Intel — Fri, 04 Dec 2020 18:08:58 GMT

Hello Hyunsoo,

Does this answer your questions regarding the Quoting Enclave?

Sincerely,

Jesus G.

Intel Customer Support

Re: Question about Quote Enclave

hyunsoo — Sat, 05 Dec 2020 13:17:15 GMT

There is no calling a function related to QE handling in RA example(https://github.com/intel/sgx-ra-sample). I'm asking how QE was launched even if we never called directly. And how it is managed(scheduled)?

Thank you

Re: Question about Quote Enclave

JesusG_Intel — Mon, 07 Dec 2020 18:06:23 GMT

Hello Hyunsoo,

The Quoting Enclave is installed with the Platform Software. The user never calls it directly. It is called and scheduled by the AESM. In other words, the user does not have to worry about calling the QE; it happens automatically.

Sincerely,

Jesus G.
Intel Customer Support

Re:Question about Quote Enclave

JesusG_Intel — Tue, 08 Dec 2020 15:51:55 GMT

This thread has been marked as answered and Intel will no longer monitor this thread. If you want a response from Intel in a follow-up question, please open a new thread.