intel / intel/confidential-computing.sgx.sdk
sign_tool never sets debug attribute bit
Open
bug
- Dominant language
- C++
- Stars
- 2
- Forks
- 3
- PR merge metrics
- No merged PRs in 30d
Description
The XML tag DisableDebug=1 ensures that the debug bit is both 0 and contributes to the signer key derivation.
If DisableDebug=0, then the debug bit is still 0 (line manage_metadata.cpp:268), but it's not a contributor to the signer key derivation.
I would have thought that DisableDebug=0 would in fact set the debug bit in ATTRIBUTES.
Contributor guide
Assessment
This issue has not been assessed yet.