intel / intel/confidential-computing.tee.dcap

Concurrency verification behavior in QVL Impacted by QVE Policy

Open
#402 5 comments 2 reactions 0 assignees View on GitHub
Dominant language
C
Stars
326
Forks
198
PR merge metrics
No merged PRs in 30d

Description

We have observed that the concurrency logic in QVL is being influenced by QVE policy. This behavior seems unintended and could lead to inconsistent handling of concurrent verifiction requests in QVL.

### Expected Behavior
The `qve_policy` is designed to impact QVE verification exclusively. Ideally, `qve_policy` should not affect the QVL's functionality.

### Current Behavior
Currently, QVL processes received verification requests **serially by default**. The default value of `qve_policy` is set to `SGX_QL_PERSISTENT` (which is equivalent to `SGX_QL_DEFAULT`). However, when we configure the `qve_policy` value to `SGX_QL_PERSISTENT_QVE_MULTI_THREAD`, QVL is capable of processing verification requests concurrently.

https://github.com/intel/SGXDataCenterAttestationPrimitives/blob/45554a754ba8c03342cc394831fa7f04db08805c/QuoteVerification/dcap_quoteverify/sgx_dcap_quoteverify.cpp#L504-L515

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.