Intel® Software Guard Extensions (Intel® SGX)
Discussion board focused on hardware-based isolation and memory encryption to provide extended code protection in solutions.
1514 Discussions

fTPM Endorsement Key invalid certificate

gerasiovM
Beginner
‎03-23-2025 07:39 AM
268 Views

pyca/cryptography can't parse the distributed EK certificate because it contains an encrypted default value for "critical" field in one of its extensions. This makes the certificate invalid and pyca/cryptography doesn't support parsing of invalid certificates.

 

Here's the github issue with relevant information:

https://github.com/pyca/cryptography/issues/12665

 

Attached is the PEM encoded EK certificate

Preview file
2 KB
0 Kudos

Link Copied

1 Reply
Benny_Intel
Moderator
‎04-01-2025 02:58 AM
148 Views

Could you please elaborate what the relation of this request and Intel SGX is? 
The Github Issue you linked to (https://github.com/pyca/cryptography/issues/12665) seems to be the proper place for the request and you already received an answer there.

Best regards,
Benny

0 Kudos
Copy link
Reply

Community support is provided Monday to Friday. Other contact methods are available here.

Intel does not verify all solutions, including but not limited to any file transfers that may appear in this community. Accordingly, Intel disclaims all express and implied warranties, including without limitation, the implied warranties of merchantability, fitness for a particular purpose, and non-infringement, as well as any warranty arising from course of performance, course of dealing, or usage in trade.

For more complete information about compiler optimizations, see our Optimization Notice.