Provided a reproducible SDK. Supported new OS: RHEL 8.1, CentOS 8.1 and Fedora 31. Supported user to specify platform id in PCK Cert ID Retrieval Tool’s command line option. Added ability to execute Platform Cert ID Retrieval Tool on multi-package platforms without loading enclaves. PCCS now supports this functionality. The platform still needs to support SGX. Updated Platform Cert ID Retrieval Tool and Multi-package registration tool to align with BIOS platform manifest changes. Added .deb and .rpm installers for Platform Cert ID Retrieval Tool and Multi-package Registration Agent. Fixed bugs. Signed-off-by: Li, Xun <xun.li@intel.com>
Intel(R) EPID SDK
The Intel(R) Enhanced Privacy ID Software Development Kit
Intel(R) EPID SDK enables adding Intel(R) EPID support to applications and platforms.
Intel(R) EPID is a cryptographic protocol which enables the remote authentication of a trusted platform whilst preserving the user's privacy.
-
For a given public key there are many (e.g., millions) of private keys. The key holders form a group.
-
Any key holder may sign against the one public key.
-
No one can tell which private key signed the data. This is the privacy property.
You can use Intel(R) EPID as a foundational building block for a multitude of security solutions.
Prerequisites
What's New in This Release
See CHANGELOG.md.
Documentation
See doc/index.html to browse the html documentation.
License
See LICENSE.txt.
Math Primitives
The source code used for math primitives in the Intel(R) EPID SDK is a subset of the Intel(R) IPP Cryptography library (version 2017 Update 2) written in pure C and not optimized for performance. For higher performance, you can use the commercial version of the IPP Cryptography library, which is available at https://software.intel.com/articles/download-ipp-cryptography-libraries.
More information on the optimized versions of Intel(R) IPP Cryptography library, including mitigations for a potential side-channel issue are available at https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00060&languageid=en-fr.