Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Fabio_S_2
Beginner
60 Views

Problem with 'sgx_ra_msg3_t' mac field

Jump to solution

On the latest version of developer reference (2.8 - p368), the 'mac' field is described as:

"AES-CMAC of g_a, ps_sec_prop, GID, and quote[], using SMK."

But the CMAC function returns a different value. If I remove the GID, the CMAC function result matches the mac field value. Someone else had the same problem?

Tags (1)
0 Kudos

Accepted Solutions
JesusG_Intel
Moderator
60 Views

Hello Fabio, you are correct. The developer reference has a typo, it should not include the GID in the mac calculation. It should read: "AES-CMAC of g_a, ps_sec_prop, and quote[], using SMK.” The correct CMAC calculation for msg3 can be seen in Figure 3, which shows the full Remote Attestation Flow, on this page.

We will fix this error in the next revision of the document. Thank you for pointing it out.

Regards,

Jesus

View solution in original post

1 Reply
JesusG_Intel
Moderator
61 Views

Hello Fabio, you are correct. The developer reference has a typo, it should not include the GID in the mac calculation. It should read: "AES-CMAC of g_a, ps_sec_prop, and quote[], using SMK.” The correct CMAC calculation for msg3 can be seen in Figure 3, which shows the full Remote Attestation Flow, on this page.

We will fix this error in the next revision of the document. Thank you for pointing it out.

Regards,

Jesus

View solution in original post