Li, Xun
8a22317709
Upgraded to OpenSSL 3.0.10. Added interoperable RA-TLS support which follows CCC design. Enhanced Protect File System performance and added additional dependency `libsgx_pthread.a`. Added the Constant Time instruction Decoder (CTD) into the default AEX-Notify mitigation handler in order to prevent the introduction of any additional subtle sidechannel leakages within the default handler. Added Mistletoe 3 mitigations to the IPP Cryptography Library to the AES-ECB, AESGCM, and AES-CMAC algorithms. These have been incorporated transparently into the `sgx_tcrypto` library. Resigned all Intel® SGX Architecture Enclaves. Upgraded Intel SGX Quote Verification Enclave to integrate OpenSSL/SgxSSL 3.0.10. Added Attestation Library support for Intel(R) TDX Migration TD. Added Rust wrapper for low-level Quote Generation APIs. Enabled `SE_TRACE` log in release binary. Updated Rust QVL wrapper to use native Rust structure for quote verification collateral. Added a limitation in the DCAP QVL to only allow the user to set the QvE load policy once. Fixed bugs. Signed-off-by: Li, Xun <xun.li@intel.com>
LE source code
The LE is part of Intel(R) Software Guard Extensions for Linux* OS which is published in linux-sgx Github repository. The libsgx_le.signed.so in prebuilt package is built by le with branch sgx_2.22_reproducible and signed by Intel.
PVE source code
The PVE is part of Intel(R) Software Guard Extensions for Linux* OS which is published in linux-sgx Github repository. The libsgx_pve.signed.so in prebuilt package is built by pve with branch sgx_2.22_reproducible and signed by Intel.
PCE source code
The PCE is part of Intel(R) Software Guard Extensions for Linux* OS which is published in linux-sgx Github repository. The libsgx_pce.signed.so in prebuilt package is built by pce with branch sgx_2.22_reproducible and signed by Intel.
QE source code
The QE is part of Intel(R) Software Guard Extensions for Linux* OS which is published in linux-sgx Github repository. The libsgx_qe.signed.so in prebuilt package is built by qe with branch sgx_2.22_reproducible and signed by Intel.