Intel(R) SGX DCAP 1.10.3 Release

Upgraded Intel(R) Integrated Performance Primitives (IPP) Cryptography library to version 2020 update 3. Upgraded Intel(R) SGX Architecture Enclaves based on new IPP crypto library. Signed-off-by: Zhang Lili <[email protected]>
intel · May 7, 2021 · d8a2f52 · d8a2f52
1 parent 6402a24
commit d8a2f52
Show file tree

Hide file tree

Showing 10 changed files with 24 additions and 16 deletions.
diff --git a/QuoteGeneration/README.md b/QuoteGeneration/README.md
@@ -37,7 +37,7 @@ For Windows* OS
 **NOTE**:`sgx_dcap_dev.inf` is for Windows* Server 2016 LTSC and `sgx_dcap.inf` is for Windows* Server 2019 LTSC.
 
 ## How to install
-   Refer to the *"Installation Instructions"* section in the [Intel(R) Software Guard Extensions: Data Center Attestation Primitives Installation Guide For Windows* OS](https://download.01.org/intel-sgx/sgx-dcap/1.10/windows/docs/Intel_SGX_DCAP_Windows_SW_Installation_Guide.pdf) to install the right packages on your platform.
+   Refer to the *"Installation Instructions"* section in the [Intel(R) Software Guard Extensions: Data Center Attestation Primitives Installation Guide For Windows* OS](https://download.01.org/intel-sgx/sgx-dcap/1.10.3/windows/docs/Intel_SGX_DCAP_Windows_SW_Installation_Guide.pdf) to install the right packages on your platform.
 
 
 For Linux* OS

diff --git a/QuoteGeneration/common/inc/internal/se_version.h b/QuoteGeneration/common/inc/internal/se_version.h
@@ -28,10 +28,10 @@
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  *
  */
-#define STRFILEVER    "1.10.100.4"
+#define STRFILEVER    "1.10.103.1"
 #define COPYRIGHT      "Copyright (C) 2021 Intel Corporation"
-#define FILEVER        1,10,100,4
-#define PRODUCTVER     1,10,100,4
-#define STRPRODUCTVER  "1.10.100.4"
+#define FILEVER        1,10,103,1
+#define PRODUCTVER     1,10,103,1
+#define STRPRODUCTVER  "1.10.103.1"
 #define COMPANYNAME    "Intel Corporation"
 #define PRODUCTNAME    "Intel® Software Guard Extensions"
diff --git a/QuoteGeneration/download_prebuilt.bat b/QuoteGeneration/download_prebuilt.bat
@@ -29,9 +29,9 @@
 
 @echo off
 
-set ae_file_name=prebuilt_windows_dcap_1.10.zip
-set checksum_file=SHA256SUM_prebuilt_windows_dcap_1.10.cfg
-set server_url_path=https://download.01.org/intel-sgx/sgx-dcap/1.10/windows/
+set ae_file_name=prebuilt_windows_dcap_1.10.3.zip
+set checksum_file=SHA256SUM_prebuilt_windows_dcap_1.10.3.cfg
+set server_url_path=https://download.01.org/intel-sgx/sgx-dcap/1.10.3/windows/
 set server_ae_url=%server_url_path%/%ae_file_name%
 set server_checksum_url=%server_url_path%/%checksum_file%
 

diff --git a/QuoteGeneration/download_prebuilt.sh b/QuoteGeneration/download_prebuilt.sh
@@ -32,9 +32,9 @@
 
 top_dir=`dirname $0`
 out_dir=$top_dir
-ae_file_name=prebuilt_dcap_1.10.tar.gz
-checksum_file=SHA256SUM_prebuilt_dcap_1.10.cfg
-server_url_path=https://download.01.org/intel-sgx/sgx-dcap/1.10/linux
+ae_file_name=prebuilt_dcap_1.10.3.tar.gz
+checksum_file=SHA256SUM_prebuilt_dcap_1.10.3.cfg
+server_url_path=https://download.01.org/intel-sgx/sgx-dcap/1.10.3/linux
 server_ae_url=$server_url_path/$ae_file_name
 server_checksum_url=$server_url_path/$checksum_file
 

diff --git a/QuoteGeneration/installer/linux/deb/libsgx-dcap-ql/libsgx-dcap-ql-1.0/debian/control b/QuoteGeneration/installer/linux/deb/libsgx-dcap-ql/libsgx-dcap-ql-1.0/debian/control
@@ -9,7 +9,7 @@ Homepage: https://github.com/intel/SGXDataCenterAttestationPrimitives
 Package: libsgx-dcap-ql
 Architecture: amd64
 Depends: libsgx-qe3-logic(>= @dep_version@), libsgx-pce-logic(>= @dep_version@), libsgx-ae-qve(>= @dep_version@), ${shlibs:Depends}, ${misc:Depends}
-Recommends: libsgx-dcap-quote-verify(>= @dep_version@)
+Recommends: libsgx-dcap-quote-verify(>= @dep_version@), libsgx-quote-ex(>= 2.13)
 Description: Intel(R) Software Guard Extensions Data Center Attestation Primitives
 
 Package: libsgx-dcap-ql-dev

diff --git a/QuoteGeneration/installer/linux/rpm/libsgx-dcap-ql/libsgx-dcap-ql.spec b/QuoteGeneration/installer/linux/rpm/libsgx-dcap-ql/libsgx-dcap-ql.spec
@@ -37,7 +37,7 @@ Release:        1%{?dist}
 Summary:        Intel(R) Software Guard Extensions Data Center Attestation Primitives
 Group:          Development/Libraries
 Requires:       libsgx-qe3-logic >= %{version}-%{release} libsgx-pce-logic >= %{version}-%{release} libsgx-ae-qve >= %{version}-%{release}
-Recommends:     libsgx-dcap-quote-verify >= %{version}-%{release}
+Recommends:     libsgx-dcap-quote-verify >= %{version}-%{release} libsgx-quote-ex >= 2.13
 
 License:        BSD License
 URL:            https://github.com/intel/SGXDataCenterAttestationPrimitives

diff --git a/QuoteGeneration/installer/win/DCAP_Components/DCAP_Components.nuspec b/QuoteGeneration/installer/win/DCAP_Components/DCAP_Components.nuspec
@@ -9,7 +9,7 @@
     <requireLicenseAcceptance>false</requireLicenseAcceptance>
     <description>DCAP Components</description>
     <dependencies>
-      <dependency id="SgxHeaders" version="2.12.100.4" />
+      <dependency id="SgxHeaders" version="2.12.103.1" />
     </dependencies>
   </metadata>
   <files>

diff --git a/QuoteGeneration/psw/ae/data/prebuilt/README.md b/QuoteGeneration/psw/ae/data/prebuilt/README.md
@@ -0,0 +1,8 @@
+# PCE source code
+The PCE is part of Intel(R) Software Guard Extensions for Linux\* OS which is published in [linux-sgx](https://github.com/intel/linux-sgx/) Github repository. The libsgx_pce.signed.so in prebuilt package is built by [pce](https://github.com/intel/linux-sgx/tree/master/psw/ae/pce) with branch [sgx_2.13.103_reproducible](https://github.com/intel/linux-sgx/tree/sgx_2.13.103_reproducible) and signed by Intel.
+
+# QE3 source code
+The QE3 is part of [Intel(R) Software Guard Extensions Data Center Attestation Primitives](https://github.com/intel/SGXDataCenterAttestationPrimitives/) Github repository. The libsgx_qe3.signed.so in prebuilt package is built by [qe3](https://github.com/intel/SGXDataCenterAttestationPrimitives/tree/master/QuoteGeneration/quote_wrapper/quote/enclave) with branch [sgx_2.13.103_reproducible](https://github.com/intel/linux-sgx/tree/sgx_2.13.103_reproducible) and signed by Intel.
+
+# QVE source code
+The QVE is part of [Intel(R) Software Guard Extensions Data Center Attestation Primitives](https://github.com/intel/SGXDataCenterAttestationPrimitives/) Github repository. The libsgx_qve.signed.so in prebuilt package is built by [qve](https://github.com/intel/SGXDataCenterAttestationPrimitives/tree/master/QuoteVerification/QvE/Enclave) with branch [sgx_2.13.103_reproducible](https://github.com/intel/linux-sgx/tree/sgx_2.13.103_reproducible)and signed by Intel.
diff --git a/QuoteGeneration/quote_wrapper/quote/enclave/linux/config.xml b/QuoteGeneration/quote_wrapper/quote/enclave/linux/config.xml
@@ -2,7 +2,7 @@
     <IntelSigned>1</IntelSigned>
     <ProvisionKey>1</ProvisionKey>
     <ProdID>0x1</ProdID>
-    <ISVSVN>5</ISVSVN>
+    <ISVSVN>6</ISVSVN>
     <TCSNum>1</TCSNum>
     <TCSPolicy>1</TCSPolicy>
     <HW>0</HW>

diff --git a/QuoteGeneration/quote_wrapper/quote/enclave/win/config.xml b/QuoteGeneration/quote_wrapper/quote/enclave/win/config.xml
@@ -2,7 +2,7 @@
     <IntelSigned>1</IntelSigned>
     <ProvisionKey>1</ProvisionKey>
     <ProdID>0x1</ProdID>
-    <ISVSVN>5</ISVSVN>
+    <ISVSVN>6</ISVSVN>
     <TCSNum>1</TCSNum>
     <TCSPolicy>1</TCSPolicy>
     <HW>0</HW>