intel / intel/intel-sgx-ssl

Address INTEL-SA-00219

Open
#49 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Assembly
Stars
245
Forks
84
Avg merge
2d 12h
Merged PRs (30d)
4

Description

There is a security advisory that suggests that structures be aligned so that data inside the enclave memory should avoid putting sensitive data in DWORD0 and DWORD1 of the cache line.

_"Organize the code/data within enclave memory to avoid putting sensitive materials in DWORD0 and DWORD1 of cache line. The effectiveness of this mitigation is dependent on the ability for the software to avoid the affected memory region. To assist the enclave application providers to modify their code, Intel is releasing SGX SDK update (Windows version 2.5.101.3, Linux version 2.7.101.3) with new memory allocation APIs to avoid the affected memory region. More details about the APIs can be found here."_

Is there a plan to mitigate this vulnerability in SGXSSL?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.