Intel® Software Guard Extensions (Intel® SGX)
Discussion board focused on hardware-based isolation and memory encryption to provide extended code protection in solutions.
1401 Discussions

SGX DCAP 1.5 Driver Checksum Mismatch

Holodov__Dmitry
Beginner
‎03-11-2020 10:08 PM
330 Views

The drivers in the 1.4 and 1.5 SGX DCAP releases have the same version number, but the files do not match.  Should I be worried that this is an indicator of compromise?

$ sha256sum DCAP-1.?/sgx_linux_x64_driver_1.21.bin
6b2b35697b166b9ac291569acbcff1b79c4cec1fa8dd1745391fed8401c40d95  DCAP-1.4/sgx_linux_x64_driver_1.21.bin
5d72a9844ce4f9343a6294e68b37dff73a9dc97ac78860a769481437cd9863b6  DCAP-1.5/sgx_linux_x64_driver_1.21.bin

 

0 Kudos

Link Copied

1 Reply
JesusG_Intel
Moderator
‎03-12-2020 10:14 AM
330 Views

Hello Dmitry,

Those are the correct checksums and the files are not compromised. You can find the checksums in these files in the repositories:

https://download.01.org/intel-sgx/sgx-dcap/1.4/linux/SHA256SUM_dcap_1.4

https://download.01.org/intel-sgx/latest/dcap-latest/linux/SHA256SUM_dcap_1.5

The driver files are the same source code and the same version but they get rebuilt with the new DCAP releases so the hashes may be different.

Regards,

Jesus

Intel Customer Support

0 Kudos
Copy link
Reply

Community support is provided during standard business hours (Monday to Friday 7AM - 5PM PST). Other contact methods are available here.

Intel does not verify all solutions, including but not limited to any file transfers that may appear in this community. Accordingly, Intel disclaims all express and implied warranties, including without limitation, the implied warranties of merchantability, fitness for a particular purpose, and non-infringement, as well as any warranty arising from course of performance, course of dealing, or usage in trade.

For more complete information about compiler optimizations, see our Optimization Notice.