topic Re:Intel SGX with OpenSSL FIPS mode in Intel® Software Guard Extensions (Intel® SGX)

Intel SGX with OpenSSL FIPS mode

Anandakumar — Mon, 07 Nov 2022 07:04:16 GMT

Hello All,

We have been testing our Intel SGX implementation with the SGXSSL encryption library. We can build and run the OpenSSL in FIPS mode, which is validated and tested under FIPS compliance regulations.

Is there any way to build the SGXSSL with FIPS mode OpenSSL?

Please share your experience and thoughts about this.

Thanks,

Anand

Re:Intel SGX with OpenSSL FIPS mode

Sahira_Intel — Wed, 09 Nov 2022 21:12:33 GMT

Hey Anand,

I am checking with the SGX SSL team on this and will get back to you.

Sincerely,

Sahira

Re:Intel SGX with OpenSSL FIPS mode

Sahira_Intel — Wed, 16 Nov 2022 23:39:57 GMT

Hi Anand,

Sorry for the late reply. The latest SGXSSL is based on OpenSSL 1.1.1, which doesn't support FIPS mode. So that functionality is not supported.

OpenSSL however does support FIPS mode.

Sincerely,

Sahira