intel / intel/confidential-computing.sgx.sdk

sgx_unseal_data() get 0x3001 error

Open
#165 3 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
C++
Stars
2
Forks
3
PR merge metrics
No merged PRs in 30d

Description

hi everyone,
I call sgx_unseal_data() in sgx environment, sometimes got 0x3001 error which means SGX_ERROR_MAC_MISMATCH: Report verification error.
I found it may happen after the app was recompile and link.
Is it a issue?
I think the app was modified is a normal action. If the app can't unseal data after recompiling and linking, the sealed data become unreadable, and the app can't recover data which was sealed.

Contributor guide

Open the contributing guide

Research direction

Start with the sgx_unseal_data() entry point and the reported 0x3001 SGX_ERROR_MAC_MISMATCH result. Compare sealed data behavior before and after the application is recompiled and linked, then determine whether the SDK documents this as expected and what recovery behavior should be supported.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp
Domain
security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.