SGX Internal CREGs

[gu_j_1]

How to get the value of SGX Internal CREGs? 

When enclave A makes a report to enclave B, in enclave B I want to get the same report key which is used during enclave making the report.

So, it seems that I must know some CREGs' value such as CR_SEAL_FUSES.

Thanks. 

[Surenthar_S_Intel · Accepted solution]

Hi Gu,

There is an SDK API, sgx_verify_report(report), to perform this function.  An enclave can also generate the report key using the API, sgx_get_key(key_request, &key), which is a wrapper for SGX's EGETKEY instruction.  The report's MAC is generated using AES128_CMAC.

CREG's are internal registers to the part. The programmer is not supposed to have access to them.

Thanks and Regards,
Surenthar Selvaraj