Intel® Software Guard Extensions (Intel® SGX)
Use hardware-based isolation and memory encryption to provide more code protection in your solutions.

FIPS or CC validation

Lauritzsen__Roar
Beginner
410 Views

Is Intel aware of or currently involved in any effort to validate or certify SGX according to formal specifications such as FIPS 140 or Common Criteria? We are faced with customers who would value such validation, and we are wondering if anything can be said along those lines.

0 Kudos
1 Reply
JesusG_Intel
Moderator
410 Views

Hello Roar,

FIPS and the like don’t certify instructions or Trusted Execution Environments like SGX provides. They certify crypto algorithms and functions at the lower levels and even hardware components (chassis intrusion detection, environmental conditions or fluctuations, even protections against radiation/EMP) at the upper levels.  Some orgs have used SGX and gotten FIPS 140-2 certifications, e.g. WolfSSL and Fortanix, using SGX, but you can’t actually get a FIPS certification for SGX itself.  This Wiki has a good description.

Regards,

Jesus

Intel Customer Support

Reply