mirror of
https://github.com/intel/linux-sgx
synced 2026-06-08 14:49:32 +00:00
Zhang Lili
6bb988fd7c
Upgraded Intel(R) Integrated Performance Primitives Cryptography library to version 2021 update 3. Upgraded Intel(R) SGX Architecture Enclaves based on new IPP crypto library. Added software prevention of fault injection attacks. Upgraded to GNU Binutils 2.36.1. Stopped providing ld.gold (developers should use ld instead). Supported Google Protobuf C++. Enabled C++14 within SGX SDK. Added SM2/3/4 Samples. Fixed bugs. Signed-off-by: Zhang Lili <lili.z.zhang@intel.com>
The ippcp library is built based on the Open Source project ipp-crypto:
In order to build your own IPP crypto, please follow below steps:
- Download the prebuilt mitigation tools package
as.ld.objdump.gold.{ver}.tar.gzfrom 01.org, extract the package and copy the tools to/usr/local/bin. - Read the ipp-crypto README to prepare your build environment.
- Make sure ipp-crypto source code are prepared.
- Build the target ippcp library with the prepared Makefile:
a. Build the target ippcp library with All-Loads-Mitigation:
$ make MITIGATION-CVE-2020-0551=LOAD
b. Build the target ippcp library with Branch-Mitigation:
$ make MITIGATION-CVE-2020-0551=CF
c. Build the target ippcp library with No-Mitigation:
$ make
The built-out static librarylibippcp.aand header files will be copied into the right place.
Remember to "make clean" before switching the build.
For IPP crypto reproducible build, please follow the instructions in reproducibility README.md to reproduce the prebuilt IPP crypto.