Intel® Software Guard Extensions (Intel® SGX)
Discussion board focused on hardware-based isolation and memory encryption to provide extended code protection in solutions.

FIPS or CC validation

Lauritzsen__Roar
Beginner
1,261 Views

Is Intel aware of or currently involved in any effort to validate or certify SGX according to formal specifications such as FIPS 140 or Common Criteria? We are faced with customers who would value such validation, and we are wondering if anything can be said along those lines.

0 Kudos
1 Reply
JesusG_Intel
Moderator
1,261 Views

Hello Roar,

FIPS and the like don’t certify instructions or Trusted Execution Environments like SGX provides. They certify crypto algorithms and functions at the lower levels and even hardware components (chassis intrusion detection, environmental conditions or fluctuations, even protections against radiation/EMP) at the upper levels.  Some orgs have used SGX and gotten FIPS 140-2 certifications, e.g. WolfSSL and Fortanix, using SGX, but you can’t actually get a FIPS certification for SGX itself.  This Wiki has a good description.

Regards,

Jesus

Intel Customer Support

0 Kudos
Reply