Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Beginner
13 Views

EGETKEY, sgx uses some information to export the secret key, there are several problems

1. What does the owner Epoch and CPUSVN in the table mean? If they are machine-specific, how does SGX ensure that the same Enclave uses the same seal key on different machines?
2. Should KEYREQUEST be kept secret? If the attacker gets KEYREQUEST, how does SGX ensure that the seal key is not exposed? Is SGX secure by hiding key export functions in hardware?

0 Kudos
0 Replies