Li, Xun
c505e6129a
Added support for Reproducible Enclave Build using Docker file. Added support for Intel AVX-512 instructions and Intel SHA Extensions New Instructions (SHA-NI) in trusted libraries. Support both EPID and ECDSA based quote for quoting related interfaces in sgx_uae_service library. Updated key exchange library to support both EPID and ECDSA based remote attestation. Support new interface to check platform information blob from remote attestation response message. Fixed bugs. Signed-off-by: Li, Xun <xun.li@intel.com>
Intel(R) EPID SDK
The Intel(R) Enhanced Privacy ID Software Development Kit
Intel(R) EPID SDK enables adding Intel(R) EPID support to applications and platforms.
Intel(R) EPID is a cryptographic protocol which enables the remote authentication of a trusted platform whilst preserving the user's privacy.
-
For a given public key there are many (e.g., millions) of private keys. The key holders form a group.
-
Any key holder may sign against the one public key.
-
No one can tell which private key signed the data. This is the privacy property.
You can use Intel(R) EPID as a foundational building block for a multitude of security solutions.
Prerequisites
What's New in This Release
See CHANGELOG.md.
Documentation
See doc/index.html to browse the html documentation.
License
See LICENSE.txt.
Math Primitives
The source code used for math primitives in the Intel(R) EPID SDK is a subset of the Intel(R) IPP Cryptography library (version 2017 Update 2) written in pure C and not optimized for performance. For higher performance, you can use the commercial version of the IPP Cryptography library, which is available at https://software.intel.com/articles/download-ipp-cryptography-libraries.
More information on the optimized versions of Intel(R) IPP Cryptography library, including mitigations for a potential side-channel issue are available at https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00060&languageid=en-fr.