Update SGX quote-related headers and simulation code to align with DCAP/ECDSA quote v3.
Replace `sgx_quote_t` sizing/usage with `sgx_quote3_t` in internal and simulator paths, add `SGX_DEPRECATED_MSG` for message-bearing deprecation annotations in legacy EPID/PSE types, fix `#pragma pack(pop)` in `pce_cert.h`, and extend simulator build includes to pick up DCAP QuoteGeneration headers.
---------
Signed-off-by: Lukasz Juzwiuk <lukasz.a.juzwiuk@intel.com>
Bumped OpenSSL version from 3.0.17 to 3.0.19
Updated Intel SGX SSL archive version from 3.0_Rev5.1 to 3.0_Rev5.2
Updated corresponding SHA256 checksums for both downloads
---------
Signed-off-by: Juan Del Cuvillo <juan.b.del.cuvillo@intel.com>
Replaces a hardcoded versioned PDF link (2.27) with the “linux-latest” developer reference PDF link.
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Added TTY detection logic using `[ -t 0 ] && [ -t 1 ]` to determine if the script is running in an interactive environment
Refactored Docker command construction to use arrays for proper argument handling and variable expansion
Consolidated duplicate `docker run` commands into a single reusable command array
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Removed the Launch Enclave (LE) build steps
Updated paths for QE3, ID Enclave, TDQE, and QvE to their new locations under `ae/` subdirectory
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
The Makefile in `external/cbor` has a conditional logic (per comment: CentOS-specific),
which is attempting to move output subdirectory (`(...)/lib`) to a 64-bit-specific one (`(...)/lib64`).
In case the target exists, a stomp was attempted (and prevented due to non-forceful `mv` use).
This workaround is appending to destination instead.
---------
Signed-off-by: Mateusz Bronk <mateusz.bronk@intel.com>
Updates the `dcap_source` submodule to a newer commit, advancing it from `a9211bc` to `f4d29a6`
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Updated the dcap_source submodule from commit `2268092b9f4ee0a622c63e5301ed31f1de23d11f` to commit `a9211bc5a003c0ba2e40e12b352033d88c390c37`
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Updated copyright year from 2025 to 2026 in RPM spec files
Bumped libsgx-pce-logic and libsgx-qe3-logic minimum version requirements from 1.24 to 1.25
Updated repository homepage URL in Debian control file
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Version numbers updated from 2.27 to 2.28 across build scripts and version headers
Copyright years updated from 2025 to 2026
Repository references renamed from `intel/linux-sgx` to `intel/confidential-computing.sgx`
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Removed reference Launch Enclave implementation and related tools
Removed Launch Enclave service bundle from AESM
Updated build system to remove LE-related compilation flags and targets
Removed LE-related packages from installer scripts
---------
Signed-off-by: Krzysztof1 Wisniewski <krzysztof1.wisniewski@intel.com>
Added a hard reset step in the preparation target to reset the Abseil submodule before patch application
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Updated the dcap_source submodule commit reference from `0b542898617ead49352579d5a01a3b9896be5858` to `869fee6b6cbef3abd9f0f865f2cb8176f42c51d9`
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Add location of the SGX SDK header files to the compiler include path to fix build failure.
---------
Signed-off-by: Juan Del Cuvillo <juan.b.del.cuvillo@intel.com>
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Added explicit `libcxxrt` dependency to the `cpprt` target to ensure artifacts are available before building
Removed `libcxxrt` from `$(LIBTCXX)` dependencies since it's now transitively satisfied through `cpprt`
Simplified the `$(LIBCXXRT_STAMP)` rule by removing unnecessary `flock` synchronization logic
---------
Signed-off-by: Lukasz Kalica <lukasz.kalica@intel.com>
Updated the dcap_source submodule commit reference from `211ac0355051490aead80029aa463e73d7a1602c` to `0b542898617ead49352579d5a01a3b9896be5858`
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Update tee_report_type_t to reflect the struct change for TD Partitioning
Update sgx_verify_report2 implementation to allow new report type
---------
Signed-off-by: Feng Qiu <feng.qiu@intel.com>
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Added a new patch file `0001-fix-to-make-SGX-Linux-build-on-GCC14.patch` that undefines `__AVX__` in Abseil's CRC internal header
Updated build scripts to apply the new patch during the protobuf build process
Reformatted long command chains in Makefiles for better readability
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
libcxxrt library wasn't updated for a long time. CentOS 10 introduced a new version of gcc and g++ compilers which are more strict than compilers in CentOS 9 and earlier. Because of that, a build of cpprt module (which contains source code of libcxxrt) was failing. Now libcxxrt module was extracted from cpprt module to sgx/external/ directory and its sources (in the latest version) are cloned directly from the external Github repository. It required a few adjustments to build cpprt module successfully on Linux distros.
---------
Signed-off-by: Lukasz Kalica <lukasz.kalica@intel.com>
Running sgx-asm-pp.py on Python >= 3.12 generates many warnings:
sgx-asm-pp.py:64: SyntaxWarning: invalid escape sequence '\s'
sgx-asm-pp.py:85: SyntaxWarning: invalid escape sequence '\s'
sgx-asm-pp.py:65: SyntaxWarning: invalid escape sequence '\s'
sgx-asm-pp.py:86: SyntaxWarning: invalid escape sequence '\s'
sgx-asm-pp.py:66: SyntaxWarning: invalid escape sequence '\s'
This is a new python change:
https://docs.python.org/3/whatsnew/3.12.html#other-language-changes
"A backslash-character pair that is not a valid escape
sequence now generates a SyntaxWarning, instead of
DeprecationWarning. For example, re.compile("\d+\.\d+")
now emits a SyntaxWarning ("\d" is an invalid escape
sequence, use raw strings for regular expression:
re.compile(r"\d+\.\d+")). In a future Python version,
SyntaxError will eventually be raised, instead of
SyntaxWarning."
Given that python intends to turn this into an error in a future
release, this should be proactively fixed now.
Fortunately the regexes used by sgx-asm-pp don't appear to need
to use any genuine backslash escapes, all the backslash usage
is for regex characters, so the raw string conversion is simple.
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
Removed:
- Support for EPID based Attestation. Including Remote Attestation. (sgx_uae_epid.h, sgx_key_exchange.h)
- Support for Quote version 1 and 2
---------
Signed-off-by: Lukasz Juzwiuk <lukasz.a.juzwiuk@intel.com>
Unbound variables in installation scripts fixed.
Bash strict mode (-u) treats any attempt to access an unset variable as an error, causing the script to fail whenever an unset variable is found.
---------
Signed-off-by: Anna Platasz <anna.platasz@intel.com>
Added logic to reset the exception flag to 0 when a page fault is not handled by EDMM/custom handlers but will be handled by AEX-Notify mitigation
This prevents the enclave from crashing in the legacy non-EDMM page fault flow when AEX-Notify is enabled
---------
Signed-off-by: Scott Constable <scott.d.constable@intel.com>
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Updates the `dcap_source` submodule to a version with new project structure
---------
Signed-off-by: Sebastian Przystawski <sebastian.przystawski@intel.com>
Updated include paths to use the new directory structure
Updated installer BOM files to reflect the new path
---------
Signed-off-by: Sebastian Przystawski <sebastian.przystawski@intel.com>
- Updates the DCAP submodule to incorporate a PCCS fix that addresses how PCK certificates are handled when being inserted into TCB buckets
- Changes QVL repository name in submodules list to the new one
- Copyright headers dates corrected
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Introduces a new patch file to bump protobuf Go dependency to v1.33.0
Updates Makefile targets to apply the new patch during build preparation
Integrates the patch application into both external/protobuf and root Makefile workflows
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Signed-off-by: Krzysztof Sandowicz <krzysztof.sandowicz@intel.com>
Replaced full BSD-3-Clause license text with SPDX identifier
Updated copyright year range to 2011-2025
Fixed incorrect shell variable assignment using `$pwd` instead of `$(pwd)`
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Signed-off-by: Krzysztof Sandowicz <krzysztof.sandowicz@intel.com>
Corrected shell syntax from `OLDDIR=$pwd` to `OLDDIR=$(pwd)` across all affected spec files
Updated copyright headers from verbose BSD-3-Clause license text to SPDX identifier format
Updated copyright year range to include 2025
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
- Updates the version number for DCAP components.
- Updates the license file for PCKCertSelection to Intel Simplified.
- Updates the supported operating systems list across multiple README files.
- Fixes the Quote Verification Sample to support both Windows and Linux.
- Bumps PCCS dependency validator.js from 13.15.20 to 13.15.23.
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
ljuzwiuk