Updates the dcap_source submodule to a newer commit
Updated the dcap_source submodule commit hash from 9781872 to b1e1aff
---------
Signed-off-by: Krzysztof Sandowicz <krzysztof.sandowicz@intel.com>
Bump `optimized_libs` and `prebuilt_ae` artifact filenames from `2.28` to `2.29`
Update the checksum config filename to `SHA256SUM_prebuilt_2.29.cfg`
Point the download base URL to the `2.29` directory
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
DCAP-specific include file (QAL APIs header) moved back to DCAP.
Set DCAP submodule to version that contains reverted headers.
---------
Signed-off-by: Krzysztof1 Wisniewski <krzysztof1.wisniewski@intel.com>
Compatibility with CMake < 3.5 has been removed from CMake 3.25+. SGXSDK updated to require minimum cmake version set to 3.5. Ubuntu 26.04 switched to cmake 4.2.3 which no longer accept cmake versions lower than 3.5.
The Maintainer field in Debian packaging must follow RFC 2822 email address format.
---------
Signed-off-by: Krzysztof Sandowicz <krzysztof.sandowicz@intel.com>
SGX Protobuf version update to 33.4. Protobuf's dependency Abseil version update to 20250512.1.
---------
Signed-off-by: Anna Platasz <anna.platasz@intel.com>
SGX SDK–related attestation headers and the TVL sources originating from DCAP
tag: 'DCAP_1.25' are now relocated:
FROM: the intermediate staging area: './external/from_dcap'
(created by the '[from DCAP][move 1/2]...') commit 5b0b8e9)
INTO: their target SGX SDK repository layout.
This is a follow-on commit that places relocated files in its final locations
and updates the build system accordingly.
Additional changes:
--------------------
- `libsgx-headers` DEB/RPM package now also contains the following 2 headers:
1) sgx_qve_header.h
2) sgx_dcap_qal.h
Leveling w/ SDK - both files were part of the SDK already.
- SDK installer package now also contains the `sgx_dcap_constant_val.h` header
(from TVL), including common QvE and QAE identity verification constants.
---------
Signed-off-by: Krzysztof1 Wisniewski <krzysztof1.wisniewski@intel.com>
SGX SDK–related attestation headers and the TVL sources are relocated from the
DCAP repository (at 229ec6b0d5f1a411b6c96436d664b9ecc018559a, tag: DCAP_1.25)
into the SGX SDK repository layout.
Background
----------
This commit consolidates SGX SDK source code into a single repository, reducing
its dependency count. Although these files historically lived in DCAP, they
already participate in the SDK build and release and have so far been fetched
via the './external/dcap_source' submodule.
Placing SDK-owned definitions directly in the SDK makes ownership explicit,
reduces coupling, and lowers the risk of accidental cross-component API changes.
The TVL is now considered part of the SGX SDK; while it was already distributed
as an SDK library, its sources now live alongside the rest of the SDK.
The DCAP project will continue to use the same definitions via its dependency on
an SDK installation (and 'libsgx-headers', where appropriate).
This preserves existing behavior, as SDK headers already take precedence
over DCAP-local copies.
Mechanics
---------
1. This commit is part of a series. It only imports the required files into the
intermediate './external/from_dcap' directory; the build system does not yet
consume them.
2. Source provenance is preserved. Imported commits originating from DCAP have
their commit subject prefixed with '[from DCAP]' for easier discovery.
Follow-up
---------
- A follow-on commit, marked '[move 2/2]', will place the files in their final
locations and update the build system accordingly.
- A corresponding cleanup change in the DCAP repository will remove the
relocated copies to maintain a single source of truth.
Note: This is a source-code reorganization only; no functional or packaging changes
are introduced.
Signed-off-by: Krzysztof Wisniewski <krzysztof1.wisniewski@intel.com>
Dependencies updated to be backward compatible with already supported OSes and also support 26.04
---------
Signed-off-by: Krzysztof Sandowicz <krzysztof.sandowicz@intel.com>
Updates the `dcap_source` submodule to point to a newer commit, advancing the submodule reference from `d20287a` to `a82678d`
---------
Signed-off-by: Maciej Bialaszewski <maciej.bialaszewski@intel.com>
Bumped OpenSSL version from 3.0.17 to 3.0.19
Updated Intel SGX SSL archive version from 3.0_Rev5.1 to 3.0_Rev5.2
Updated corresponding SHA256 checksums for both downloads
---------
Signed-off-by: Juan Del Cuvillo <juan.b.del.cuvillo@intel.com>
The Makefile in `external/cbor` has a conditional logic (per comment: CentOS-specific),
which is attempting to move output subdirectory (`(...)/lib`) to a 64-bit-specific one (`(...)/lib64`).
In case the target exists, a stomp was attempted (and prevented due to non-forceful `mv` use).
This workaround is appending to destination instead.
---------
Signed-off-by: Mateusz Bronk <mateusz.bronk@intel.com>
Updates the `dcap_source` submodule to a newer commit, advancing it from `a9211bc` to `f4d29a6`
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Updated the dcap_source submodule from commit `2268092b9f4ee0a622c63e5301ed31f1de23d11f` to commit `a9211bc5a003c0ba2e40e12b352033d88c390c37`
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Updated copyright year from 2025 to 2026 in RPM spec files
Bumped libsgx-pce-logic and libsgx-qe3-logic minimum version requirements from 1.24 to 1.25
Updated repository homepage URL in Debian control file
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Removed reference Launch Enclave implementation and related tools
Removed Launch Enclave service bundle from AESM
Updated build system to remove LE-related compilation flags and targets
Removed LE-related packages from installer scripts
---------
Signed-off-by: Krzysztof1 Wisniewski <krzysztof1.wisniewski@intel.com>
Updated the dcap_source submodule commit reference from `0b542898617ead49352579d5a01a3b9896be5858` to `869fee6b6cbef3abd9f0f865f2cb8176f42c51d9`
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Updated the dcap_source submodule commit reference from `211ac0355051490aead80029aa463e73d7a1602c` to `0b542898617ead49352579d5a01a3b9896be5858`
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Added a new patch file `0001-fix-to-make-SGX-Linux-build-on-GCC14.patch` that undefines `__AVX__` in Abseil's CRC internal header
Updated build scripts to apply the new patch during the protobuf build process
Reformatted long command chains in Makefiles for better readability
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
libcxxrt library wasn't updated for a long time. CentOS 10 introduced a new version of gcc and g++ compilers which are more strict than compilers in CentOS 9 and earlier. Because of that, a build of cpprt module (which contains source code of libcxxrt) was failing. Now libcxxrt module was extracted from cpprt module to sgx/external/ directory and its sources (in the latest version) are cloned directly from the external Github repository. It required a few adjustments to build cpprt module successfully on Linux distros.
---------
Signed-off-by: Lukasz Kalica <lukasz.kalica@intel.com>
Removed:
- Support for EPID based Attestation. Including Remote Attestation. (sgx_uae_epid.h, sgx_key_exchange.h)
- Support for Quote version 1 and 2
---------
Signed-off-by: Lukasz Juzwiuk <lukasz.a.juzwiuk@intel.com>
Updates the `dcap_source` submodule to a version with new project structure
---------
Signed-off-by: Sebastian Przystawski <sebastian.przystawski@intel.com>
Updated include paths to use the new directory structure
Updated installer BOM files to reflect the new path
---------
Signed-off-by: Sebastian Przystawski <sebastian.przystawski@intel.com>
- Updates the DCAP submodule to incorporate a PCCS fix that addresses how PCK certificates are handled when being inserted into TCB buckets
- Changes QVL repository name in submodules list to the new one
- Copyright headers dates corrected
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Introduces a new patch file to bump protobuf Go dependency to v1.33.0
Updates Makefile targets to apply the new patch during build preparation
Integrates the patch application into both external/protobuf and root Makefile workflows
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Signed-off-by: Krzysztof Sandowicz <krzysztof.sandowicz@intel.com>
- Updates the version number for DCAP components.
- Updates the license file for PCKCertSelection to Intel Simplified.
- Updates the supported operating systems list across multiple README files.
- Fixes the Quote Verification Sample to support both Windows and Linux.
- Bumps PCCS dependency validator.js from 13.15.20 to 13.15.23.
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Updated the dcap_source submodule commit hash from `ed7a99c3355922e3de3950d5c298af734a5474f8` to `1d096c725b1e6e7614d91f8b1b4393b333c719e2`
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Updates the DCAP (Data Center Attestation Primitives) subproject to a new version that includes QVE (Quote Verification Enclave) updates
---------
Signed-off-by: Krzysztof1 Wisniewski <krzysztof1.wisniewski@intel.com>
Updates the DCAP (Data Center Attestation Primitives) submodule to a newer commit, incorporating the latest PCCS (Provisioning Certificate Caching Service) and upstream changes
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Removed the `#undef __AVX__` line from the SGX-specific preprocessor block in the Abseil patch.
Change needs to be reintroduced in a different manner not impacting upgrades from 2.26 to 2.27 version
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Updated the dcap_source submodule commit reference from `838f26f690ab550ece234faa19c5b1a9b9e84284` to `8b78014ba7e5a0a2beeafb24a13bc903dbb3d640`
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Updates the DCAP submodule commit hash from `3ccb75837871e6685138ec1d3224e55de7bb0bd3` to `838f26f690ab550ece234faa19c5b1a9b9e84284`
---------
Signed-off-by: Krzysztof Sandowicz <krzysztof.sandowicz@intel.com>
Bartosz Gotowalski