Missing specification documents for TDX?

[UsamaS]

The code at various points refers to some numbers, such as: 

• https://github.com/intel/SGXDataCenterAttestationPrimitives/blob/71557c7d1d869b6bd6f95566c051cbd098549509/QuoteVerification/QVL/Src/AttestationLibrary/src/Verifiers/QuoteVerifier.cpp#L123
• https://github.com/intel/SGXDataCenterAttestationPrimitives/blob/71557c7d1d869b6bd6f95566c051cbd098549509/QuoteVerification/QVL/Src/AttestationLibrary/src/Verifiers/QuoteVerifier.cpp#L115

But it seems that there is no corresponding specification document which the code is referring to. Could you please refer me to the exact specification document which is being referred to here? 

Thanks.

[Wan_Intel]

Hi UsamaS,

Thanks for reaching out to us.

Let me check with relevant team and I'll update you as soon as possible.

Regards,

Wan

[Wan_Intel]

Hello UsamaS,

We've received feedback from relevant team.

For your information, the numbers refer to sections of an internal Spec. It's meaningless in this public SGX DCAP GitHub Repo. Hope it helps.

Regards,

Wan

[UsamaS]

Hi Wan, 

I believe it is very important to make these specs public for people to understand and verify the logic. I see no good reason to keep these specs internal. 

[Wan_Intel]

Hello UsamaS,

I've checked with the relevant team.

The "internal specs" that we've mentioned in the thread above are part of an internal document used by our developers and it would not be relevant to customers. Sorry for the inconvenience and thank you for your support.

Regards,

Wan

[UsamaS]

Hi Wan, 

I am not talking about "dumb" customers. The spec will be very useful for the technical people to carry out audit and verification. For instance, see our works: 

• https://www.researchgate.net/publication/351699567_Demystifying_Attestation_in_Intel_Trust_Domain_Extensions_via_Formal_Verification
• https://www.researchgate.net/publication/367284929_SoK_Attestation_in_Confidential_Computing
• https://github.com/CCC-Attestation/formal-spec-TEE

From a transparency perspective, I don't see any reason why spec is kept internal to Intel only. If there is one, please clarify. 

Regards, 

Usama

[Wan_Intel]

Hello UsamaS,

Sorry for the inconvenience. The "internal spec" that we've mentioned above means process documentation that would not be useful to any customer.

On the other hand, do you have specific questions about Intel® Software Guard Extensions (Intel® SGX)?

Regards,

Wan

[UsamaS]

I am pretty much sure that will be very useful for us at least. 

[Wan_Intel]

Hi UsamaS,

Thanks for your question.

If you need additional information from Intel, please submit a new question as this thread will no longer be monitored.

Regards,

Wan