Linux 2.17 Open Source Gold Release

Along with the latest processor microcode and re-signed all the Intel(R) SGX Architecture Enclaves (AEs) to address CVE-2022-21123, CVE-2022-21125 and CVE-2022-21166.

Upgraded to Protobuf 3.20.

Upgraded to SgxSSL/OpenSSL 1.1.1o.

Added Intel TDX Attestation support.

Added Rust support for ECDSA quote verification.

Fixed bugs.

Linux 2.16 Open Source Gold Release

Upgraded to OpenSSL 1.1.1m.

Provided RA-TLS (Remote Attestation based Transport Layer Security) APIs and Samples.

Supported PKRU (Protection Key rights Register) in Enclave.

Added APIs of SHA384 and VerifyReport2 to support TDX.

Enhanced QPL (Quote Provider Library) to support caching Intel PCK (Provisioning Certificate Key) certificate chain in local memory, or retrieving Intel PCK cert chain from local HTTP/S address.

Upgraded Intel ECDSA Quote Verification Enclave to integrate SgxSSL/OpenSSL version 1.1.1m.

Introduced Intel ID enclave for QE identity generation.

Fixed bugs.

Linux 2.15.1 Open Source Gold Release

Upgraded to OpenSSL 1.1.1l.

Linux 2.15 Open Source Gold Release

Upgraded Intel(R) Integrated Performance Primitives Cryptography library to version 2021 update 3.
Upgraded Intel(R) SGX Architecture Enclaves based on new IPP crypto library.
Added software prevention of fault injection attacks.
Upgraded to GNU Binutils 2.36.1. Stopped providing ld.gold (developers should use ld instead).
Supported Google Protobuf C++.
Enabled C++14 within SGX SDK.
Added SM2/3/4 Samples.
Fixed bugs.

Signed-off-by: Zhang Lili [email protected]

Linux 2.14 Open Source Gold Release

Supported loading enclave at address 0.

Upgraded Intel(R) Quote Verification Enclave to integrate SgxSSL/OpenSSL version 1.1.1k.

Updated the DCAP driver V1.33 with stability fixes, released as V1.33.2. This is to support legacy solutions not ready to transition to the latest DCAP driver V1.41 or kernel 5.11+.

Fixed bugs.

Linux 2.13.3 Open Source Gold Release

Upgraded to Intel(R) Integrated Performance Primitives (IPP) Cryptography library version 2020 update 3.
Upgraded Intel(R) SGX Architecture Enclaves based on new IPP crypto library.
Fixed bugs.

Signed-off-by: Zhang Lili [email protected]

Linux 2.13 Open Source Gold Release

Added more logs in PSW components for identifying issues.

Upgraded OpenSSL and SgxSSL to latest version 1.1.1i in DCAP components.

Added data base migration support in PCCS.

Fixed bugs.

Linux 2.12 Open Source Gold Release

Added Ubuntu 20.04 and CentOS 8.2 support.

Added Intel(R) Provisioning Certification Service V3 API support for ECDSA attestation.

Fixed bugs.

Linux 2.11 Open Source Gold Release

Supported new OS: RHEL 8.2 and SUSE 15.

Provided standalone Intel(R) SGX DCAP Quote verification library installer.

Added Intel(R) SGX DCAP Platform Certificate ID Retrieval Tool and Multi-package Registration Agent (MPA) installers into SGX installation repo.

Fixed bugs.

Linux 2.10 Open Source Gold Release

Provided a reproducible SDK.

Supported new OS: RHEL 8.1, CentOS 8.1 and Fedora 31.

Supported user to specify platform id in PCK Cert ID Retrieval Tool’s command line option.

Added ability to execute Platform Cert ID Retrieval Tool on multi-package platforms without loading enclaves. PCCS now supports this functionality. The platform still needs to support SGX.

Updated Platform Cert ID Retrieval Tool and Multi-package registration tool to align with BIOS platform manifest changes.

Added .deb and .rpm installers for Platform Cert ID Retrieval Tool and Multi-package Registration Agent.

Fixed bugs.