Details about CPUSVN in Intel SGX

[AAhma10]

Hey,

I am inquiring about the CPUSVN number that is provided as part of the

remote attestation digest of an enclave. In particular, I wanted to know if

this number is unique for every processor or two different processors

(with similar microcode update versions) can have the same CPUSVN?

Thanks!

Adil

[AdrianM_Intel]

Hello AAhma10,

Thank you for posting on the Intel® communities.  

We would like to clarify some information to address your request in a better way.

• Can you please let us know if you are developing software/hardware?
• Is there any specific processor model?
• May I know what does CPUSVN number refer to?
• Would you like to know more about Intel® Software Guard Extensions (Intel® SGX)?

Best regards,

Adrian M.

Intel Customer Support Technician

[AAhma10]

Hey,

Sure!

1. I am developing software using Intel SGX.
2. I have multiple SGX-enabled CPUs (including 6700U, 6700K etc.)
3. CPUSVN (CPU security version number) is the number (or hash) of the microcode update that SGX reports during remote attestation. It is used to figure out what microcode (e.g., is spectre fixed in this microcode?) a CPU is running.
4. Yes, my question is related to Intel SGX.

Thanks!

[AdrianM_Intel]

Hello AAhma10,

Thank you for your reply.

To better assist you, we recommend that you submit your question on the Intel® Developer Zone. 

Please register, and create an account so that you can receive further support, and get access to useful documentation. 

Intel® Developer Zone - Contact Page 

https://software.intel.com/en-us/support 

Also, you can visit Intel® Resource & Design Center.

https://www.intel.com/content/www/us/en/design/resource-design-center

Best regards,

Adrian M.

Intel Customer Support Technician

[AAhma10]

Thanks for the pointer. I'll redirect my query there!