https://community.intel.com/t5/Intel-Software-Guard-Extensions/How-to-verify-the-correctness-of-the-server-s-code/m-p/1400787#M5396 <P>Hi double,</P> <P>If you look at the code from the article you linked, you can find that the measurement from that article is compare <A href="https://github.com/intel/sgx-ra-sample/blob/53445084bd4a5709ec3cd8d168f37e46b6ae9f14/enclave_verify.c#L91" target="_blank">here</A>, and looking at the report structure in the SGX SDK code, you can see that the enclave measurement (MRENCLAVE) is part of the&nbsp;report body, as seen <A href="https://github.com/intel/linux-sgx/blob/fdb3b8b4695b40afab5a3212cf69eb8d8db7cfb1/common/inc/sgx_report.h#L100" target="_blank">here</A>.</P> <P>Hope this is helpful.</P> <P>&nbsp;</P> <P>Sincerely,</P> <P>Sahira&nbsp;</P> Fri, 15 Jul 2022 21:41:58 GMT Sahira_Intel 2022-07-15T21:41:58Z https://community.intel.com/t5/Intel-Software-Guard-Extensions/How-to-verify-the-correctness-of-the-server-s-code/m-p/1395767#M5358 <P>Hello,</P> <P>If I want to run the enclave code in a remote server, I need to do remote attestation with the remote server. But how can I guarantee that the enclave code running in the remote server is the enclave code I provide? After studying the code samples for remote attestation(<A href="https://www.intel.com/content/www/us/en/developer/articles/code-sample/software-guard-extensions-remote-attestation-end-to-end-example.html" target="_blank">https://www.intel.com/content/www/us/en/developer/articles/code-sample/software-guard-extensions-remote-attestation-end-to-end-example.html</A>), I guessed that the enclave measurement in the remote server should be represented by report_body in quote[] in Msg3. But regarding the fields in the report_body I don't see the measurement section regarding the enclave code. I don't know how the client can ensure that the enclave code in the remote server is legitimate.</P> <P>Thank you very much.</P> Mon, 27 Jun 2022 19:11:37 GMT https://community.intel.com/t5/Intel-Software-Guard-Extensions/How-to-verify-the-correctness-of-the-server-s-code/m-p/1395767#M5358 double 2022-06-27T19:11:37Z https://community.intel.com/t5/Intel-Software-Guard-Extensions/How-to-verify-the-correctness-of-the-server-s-code/m-p/1400787#M5396 <P>Hi double,</P> <P>If you look at the code from the article you linked, you can find that the measurement from that article is compare <A href="https://github.com/intel/sgx-ra-sample/blob/53445084bd4a5709ec3cd8d168f37e46b6ae9f14/enclave_verify.c#L91" target="_blank">here</A>, and looking at the report structure in the SGX SDK code, you can see that the enclave measurement (MRENCLAVE) is part of the&nbsp;report body, as seen <A href="https://github.com/intel/linux-sgx/blob/fdb3b8b4695b40afab5a3212cf69eb8d8db7cfb1/common/inc/sgx_report.h#L100" target="_blank">here</A>.</P> <P>Hope this is helpful.</P> <P>&nbsp;</P> <P>Sincerely,</P> <P>Sahira&nbsp;</P> Fri, 15 Jul 2022 21:41:58 GMT https://community.intel.com/t5/Intel-Software-Guard-Extensions/How-to-verify-the-correctness-of-the-server-s-code/m-p/1400787#M5396 Sahira_Intel 2022-07-15T21:41:58Z