Intel® Software Guard Extensions (Intel® SGX)
Discussion board focused on hardware-based isolation and memory encryption to provide extended code protection in solutions.
1427 Discussions

EGETKEY, sgx uses some information to export the secret key, there are several problems


1. What does the owner Epoch and CPUSVN in the table mean? If they are machine-specific, how does SGX ensure that the same Enclave uses the same seal key on different machines?
2. Should KEYREQUEST be kept secret? If the attacker gets KEYREQUEST, how does SGX ensure that the seal key is not exposed? Is SGX secure by hiding key export functions in hardware?

0 Kudos
0 Replies