Signature Padding in SGX

[SAM_R_2]

Hi,

From this white paper : https://software.intel.com/en-us/articles/innovative-technology-for-cpu-based-attestation-and-sealing

If you look at Table 2-2 in the reference, it mentions that the padding in the SECS is derived from the signature (presumably from the SIGSTRUCT).

- Thanks

[Surenthar_S_Intel · Accepted solution]

Hi Sam,

Signature Padding is included as an additional defense against padding attacks on the SIGSTRUCT signature. The signature padding being included in SGX keys results in the key being bound to a correctly composed signature over the enclave’s SIGSTRUCT and not key that signed the contents of SIGSTRUCT [MRSIGNER] or ISVSVN. 

Thanks and Regards,
Surenthar Selvaraj

[SAM_R_2]

Thanks for your info....