- 신규로 표시
- 북마크
- 구독
- 소거
- RSS 피드 구독
- 강조
- 인쇄
- 부적절한 컨텐트 신고
Hi,
I am currently doing a Sealing experiment. When I seal some chunk of data on one machine with an enclave signed with SIGNA.pem, will I be able to unseal it on another machine with the same enclave code signed with SIGNA.pem too?
It returns the following error: SGX_ERROR_INVALID_CPUSVN. Why is this so? Is this the expected result given the scenario above?
Thanks!
Kind Regards,
Elephant
링크가 복사됨
2 응답
- 신규로 표시
- 북마크
- 구독
- 소거
- RSS 피드 구독
- 강조
- 인쇄
- 부적절한 컨텐트 신고
The unsealing process must be done in the same system because the sealed data is encrypted in the enclave, using the encryption key that is derived from the CPU specific to that system.
For more information about sealing, please watch this video https://software.intel.com/en-us/videos/how-to-seal-data-in-intel-sgx
