mirror of
https://github.com/intel/linux-sgx
synced 2026-06-08 14:49:32 +00:00
Li, Xun
8a22317709
Upgraded to OpenSSL 3.0.10. Added interoperable RA-TLS support which follows CCC design. Enhanced Protect File System performance and added additional dependency `libsgx_pthread.a`. Added the Constant Time instruction Decoder (CTD) into the default AEX-Notify mitigation handler in order to prevent the introduction of any additional subtle sidechannel leakages within the default handler. Added Mistletoe 3 mitigations to the IPP Cryptography Library to the AES-ECB, AESGCM, and AES-CMAC algorithms. These have been incorporated transparently into the `sgx_tcrypto` library. Resigned all Intel® SGX Architecture Enclaves. Upgraded Intel SGX Quote Verification Enclave to integrate OpenSSL/SgxSSL 3.0.10. Added Attestation Library support for Intel(R) TDX Migration TD. Added Rust wrapper for low-level Quote Generation APIs. Enabled `SE_TRACE` log in release binary. Updated Rust QVL wrapper to use native Rust structure for quote verification collateral. Added a limitation in the DCAP QVL to only allow the user to set the QvE load policy once. Fixed bugs. Signed-off-by: Li, Xun <xun.li@intel.com>
27 lines
896 B
Diff
27 lines
896 B
Diff
diff --git a/CMakeLists.txt b/CMakeLists.txt
|
|
index 04122d9..387ebc8 100644
|
|
--- a/CMakeLists.txt
|
|
+++ b/CMakeLists.txt
|
|
@@ -34,7 +34,7 @@ if(WITH_TESTS)
|
|
add_definitions(-DWITH_TESTS)
|
|
endif(WITH_TESTS)
|
|
|
|
-option(WITH_EXAMPLES "Build examples" ON)
|
|
+option(WITH_EXAMPLES "Build examples" OFF)
|
|
|
|
option(HUGE_FUZZ "[TEST] Fuzz through 8GB of data in the test. Do not use with memory instrumentation!" OFF)
|
|
if(HUGE_FUZZ)
|
|
@@ -163,6 +163,12 @@ else()
|
|
message(STATUS "LTO is not enabled")
|
|
endif(use_lto)
|
|
|
|
+message("cmake current binary dir:"${CMAKE_CURRENT_BINARY_DIR})
|
|
+# make installation dir first
|
|
+execute_process(COMMAND ${CMAKE_COMMAND} -E make_directory
|
|
+ ${CMAKE_CURRENT_BINARY_DIR}/../../untrusted)
|
|
+set(CMAKE_INSTALL_PREFIX ${CMAKE_CURRENT_BINARY_DIR}/../../untrusted)
|
|
+
|
|
add_subdirectory(src)
|
|
if(use_lto)
|
|
set_property(DIRECTORY src PROPERTY INTERPROCEDURAL_OPTIMIZATION TRUE)
|