Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
88 Views

FIPS or CC validation

Is Intel aware of or currently involved in any effort to validate or certify SGX according to formal specifications such as FIPS 140 or Common Criteria? We are faced with customers who would value such validation, and we are wondering if anything can be said along those lines.

Tags (1)
0 Kudos
1 Reply
Highlighted
Moderator
88 Views

Hello Roar,

FIPS and the like don’t certify instructions or Trusted Execution Environments like SGX provides. They certify crypto algorithms and functions at the lower levels and even hardware components (chassis intrusion detection, environmental conditions or fluctuations, even protections against radiation/EMP) at the upper levels.  Some orgs have used SGX and gotten FIPS 140-2 certifications, e.g. WolfSSL and Fortanix, using SGX, but you can’t actually get a FIPS certification for SGX itself.  This Wiki has a good description.

Regards,

Jesus

Intel Customer Support

0 Kudos