How to derive the PCK from the platform key?

[ffffffff]

Simulation has a derive process from BASE_PROVISIONING_KEY to (simulated) PCK. Now there are three methods to derive the PCK in difference scenario:

1. On Single-Package Platform, PCK is derived from SGX provisioning root key;
2. On Multi-socket platform, PCK is derived from Platform root key which was encrypted by RSEK in Platform manifest;
3. On Simulation Platform, PCK is derived from BASE_PROVISION_KEY.
   Is that right? If it's right, do they have same derive algorithm, and the SGX provisioning root key, Platform root key,BASE_PROVISION_KEY play the same role in the derive process ?

[Sahira_Intel · Accepted solution]

Hi,

I believe you have opened a Github thread for this topic already: https://github.com/intel/SGXDataCenterAttestationPrimitives/issues/233

The short answer however is that Simulation mode derivations are not the same as the real ones, and the real ones are not public.

Thanks,

Sahira

[ffffffff]

OK. Thanks for your reply.