11 Commits

Author SHA1 Message Date
krzyszt1 590856d0c7 Removes the deprecated Launch Enclave mechanism from the Intel SGX Linux SDK codebase
Removed reference Launch Enclave implementation and related tools
Removed Launch Enclave service bundle from AESM
Updated build system to remove LE-related compilation flags and targets
Removed LE-related packages from installer scripts

---------

Signed-off-by: Krzysztof1 Wisniewski <krzysztof1.wisniewski@intel.com>
2026-01-23 07:50:18 +01:00
Li, Xun a53adeaab7 Linux 2.24 Open Source Gold Release
Upgraded to OpenSSL 3.0.13.
Upgraded to Intel(R) Integrated Performance Primitives (IPP) Cryptography library
  version 2021.11.
Upgraded to Protobuf 3.23.2.
Upgraded MbedTLS to 3.5.2.
Upgraded Intel DCAP Ring3 Abstraction Layer (R3AAL) library to support ConfigFS-TSM
  as communication channel between host and guest for TDX remote attestation.
Upgraded Intel DCAP Quote Verification Enclave to integrate OpenSSL/SgxSSL 3.0.13.
Upgraded new TDX attestation result “TD_RELAUNCH_ADVISED” in Intel DCAP Quote
  Verification Library (QVL) and Appraisal Engine.
Fixed bugs.

Signed-off-by: Li, Xun <xun.li@intel.com>
2024-04-26 15:24:15 +08:00
Haitao Huang dd65737a2f Dockerfile: add debian package build
Updated README
Also revert aesm docker to run as root inside
This was to ensure access to /dev/sgx_provision

Signed-off-by: Haitao Huang <4699115+haitaohuang@users.noreply.github.com>
2022-03-23 17:22:36 -07:00
Zhang Lili 6bb988fd7c Linux 2.15 Open Source Gold Release
Upgraded Intel(R) Integrated Performance Primitives Cryptography library to version 2021 update 3.
Upgraded Intel(R) SGX Architecture Enclaves based on new IPP crypto library.
Added software prevention of fault injection attacks.
Upgraded to GNU Binutils 2.36.1. Stopped providing ld.gold (developers should use ld instead).
Supported Google Protobuf C++.
Enabled C++14 within SGX SDK.
Added SM2/3/4 Samples.
Fixed bugs.

Signed-off-by: Zhang Lili <lili.z.zhang@intel.com>
2021-09-30 00:32:18 +00:00
leone d36736dba0 fix typo 2021-09-07 22:29:18 +08:00
Haitao Huang 1dea275f95 docker: run aesm with root
Groups/permissions in container do not always match with host env.
Run aesm with root to ensure access to /dev/sgx_provision

Signed-off-by: Haitao Huang <4699115+haitaohuang@users.noreply.github.com>
2021-07-09 03:50:01 +00:00
Sylvain Bellemare 92e99750cf Set external to true for aesmd-socket volume
Fixes #657

Signed-off-by: Sylvain Bellemare <sbellem@gmail.com>
2021-01-26 16:57:06 +00:00
Ismo Puustinen 77b2a243ea docker: use a volume for sharing the aesmd socket.
When sharing aesmd socket between two Docker containers, use a dedicated
volume instead of tmp directory on the host.
2020-09-02 10:07:54 +03:00
Haitao Huang d340cef321 Fix an error in docker/build
And minor README update

Signed-off-by: Haitao Huang <4699115+haitaohuang@users.noreply.github.com>
2020-06-23 08:05:52 -05:00
Haitao Huang 21f4d8209f Update docker files to use the FLC driver as default
Signed-off-by: Haitao Huang <4699115+haitaohuang@users.noreply.github.com>
2020-06-12 10:54:08 -05:00
Li, Xun 1eaa4551d4 Linux 2.9.1 Open Source Gold Release
Supported to query Intel(R) SGX attestation key ID list.
Fixed bugwqs.

Signed-off-by: Li, Xun <xun.li@intel.com>
2020-04-09 14:45:01 +08:00