topic Re: sealing to mrenclave question in Intel® Software Guard Extensions (Intel® SGX)

sealing to mrenclave question

riclee — Mon, 19 Dec 2022 03:56:03 GMT

If I take the 'sealing to mrenclave' policy to seal data on one computer , can i unseal the sealed data on the other computer with the same enclave code ? I know the sealing key is derived from the root sealing key and mrenclave. If I unseal the sealed date on the other computer ,which means there is different root sealing key, because the RSK is related to the cpu which means different computer has different PSK , then the derivation sealing key could be different. So in my opinion , I think the other computer can not seal the sealed data even with the same enclave code , because the derivation sealing key is different, am I right?

the other question, I can not find example about function 'sgx_seal_data_ex', only find 'sgx_seal_data' usage on SealUnseal example, Could you please supply an example about the usage 'sgx_seal_data_ex' ?

Re: sealing to mrenclave question

Sahira_Intel — Wed, 28 Dec 2022 22:21:59 GMT

Hi,

sgx_seal_data_ex is used in the tSeal sample in the SGX SDK: https://github.com/intel/linux-sgx/blob/master/sdk/tseal/tSeal.cpp

This is a link to the Developer Ref Guide which has more information and syntax about this function: https://01.org/sites/default/files/documentation/intel_sgx_sdk_developer_reference_for_linux_os_pdf.pdf#page=140

Sincerely,

Sahira

Re: sealing to mrenclave question

riclee — Wed, 21 Dec 2022 02:56:34 GMT

Thank you for supplying the example about sgx_seal_data_ex. Could you please answer the first question about sealing key?

Re: sealing to mrenclave question

AnaWilliam850 — Sat, 24 Dec 2022 00:53:06 GMT

It is possible to unseal data that has been sealed using an enclave on a different computer, as long as the following conditions are met:

The other computer must have an enclave with the same Mrenclave value as the one that was used to seal the data.
The other computer must have access to the same sealing key that was used to seal the data. This may require that the sealing key be stored in a secure location and provided to the other computer as needed.
The other computer must have the necessary software and hardware support for running enclaves and accessing sealed data.

Re: sealing to mrenclave question

riclee — Tue, 03 Jan 2023 15:27:21 GMT

sealing key is derived from the root sealing key and mrenclave with the sealing to mrenclave policy. Different computer has different root sealing key, which means even the other computer has the same mrenclave, the sealing key could be different (because the root sealing key is different). This is my opinion, but i don't know am I right？

Re: sealing to mrenclave question

riclee — Tue, 03 Jan 2023 15:27:46 GMT

Re: sealing to mrenclave question

Daniel_ˢᵍˣ — Wed, 04 Jan 2023 18:11:18 GMT

@riclee wrote:

If I take the 'sealing to mrenclave' policy to seal data on one computer , can i unseal the sealed data on the other computer with the same enclave code ? I know the sealing key is derived from the root sealing key and mrenclave. If I unseal the sealed date on the other computer ,which means there is different root sealing key, because the RSK is related to the cpu which means different computer has different PSK , then the derivation sealing key could be different. So in my opinion , I think the other computer can not seal the sealed data even with the same enclave code , because the derivation sealing key is different, am I right?

Yes, you are correct. Sealing binds the sealed data to the processor whether the sealing policy is MRENCLAVE or MRSIGNER. This means only the sealing processor can unseal the data.

If you want to seal data in Processor 1 and unseal that data in Processor 2 (where Processor 1 and Processor 2 are different) then you could encrypt the data using e.g. sgx_rijndael128GCM_encrypt in Processor 1 and somehow pass the encryption key to Processor 2.

An alternative is using the Intel Protected File System library (with automatic keys) but this still has the problem that you are responsible for safely passing the encryption key from Processor 1 to Processor 2.

Re: sealing to mrenclave question

riclee — Thu, 05 Jan 2023 06:30:48 GMT

You mean if I want to seal data in processor1 and unseal the data in processor2, I should use the sgx sdk api sgx_rijndael128GCM_encrypt with my own seal key. If using the seal policy Mernclave or Mrsigner , the sealing key binds to the processor , so processor2 can not unseal the data sealed by processor1.

Thank you for your answer , I got it!