Skip to content

Latest commit

 

History

History

QuoteVerification

README.md

Intel(R) Software Guard Extensions Data Center Attestation Primitives (Intel(R) SGX DCAP) Quote Verification Enclave Quick Start Guide

Build QvE and dcap_quoteverify libraries, non-production only (for debug purposes). For production you must use Intel(R) signed QvE.

Linux

Supported operating systems:

  • Ubuntu* 18.04 LTS Desktop 64bits
  • Ubuntu* 18.04 LTS Server 64bits
  • Ubuntu* 20.04 LTS Server 64bits
  • Red Hat Enterprise Linux Server release 8.2 64bits
  • CentOS 8.2 64bits

Requirements:

  • make
  • gcc
  • g++
  • ZIP
  • bash shell

Pre-requisites:

  • Intel(R) SGX SDK
  • Intel(R) SgxSSL: Follow instructions in https://github.com/intel/intel-sgx-ssl (By default SgxSSL will automatically be downloaded and built if not in SGX Docker container). You should use latest OpenSSL to build SgxSSL.

Build dcap_quoteverify.so and libsgx_qve.signed.so (Only for debug purposes):

$ cd QuoteVerification/
$ make
Generate a key and sign generated QvE enclave:
$ /opt/intel/sgxsdk/bin/x64/sgx_sign sign -key Enclave/<GENERATED_KEY>.pem -enclave qve.so -out libsgx_qve.signed.so -config Enclave/qve.config.xml

Build qve.so in SGX Docker container:

Use the script prepare_sgxssl.sh to download SgxSSL outside SGX Docker container firstly: Note: You may need set https proxy for the wget tool used by the script (such as export https_proxy=http://test-proxy:test-port)

$ cd QuoteVerification/
Outside SGX Docker container, download SgxSSL to ./sgxssl folder
$ ./prepare_sgxssl.sh nobuild
Inside SGX Docker container, build QvE enclave
$ make -C QvE

Windows

Supported operating systems:

  • Windows* Server 2016 (Long-Term Servicing Channel)
  • Windows* Server 2019 (Long-Term Servicing Channel)

Requirements:

  • Microsoft Visual Studio 2019 or newer.
  • 7-Zip
  • Perl #for OpenSSL build
  • NASM (Netwide Assembler)

Pre-requisites:

  • Intel(R) SGX SDK.
  • Intel(R) SgxSSL: Follow instructions in https://github.com/intel/intel-sgx-ssl (By default SgxSSL will automatically be downloaded and built). You should use latest OpenSSL to build SgxSSL.

Build sgx_dcap_quoteverify.dll and qve.signed.dll (Only for debug purposes):

> Prepare SgxSSL by running script "prepare_sgxssl.cmd" in dcap_source\QuoteVerification
  > prepare_sgxssl.cmd x64 Debug
  > prepare_sgxssl.cmd x64 Release

> In dcap_source directory, use Visual Studio to open ``SGX_DCAP.sln`` and build