Intel® SGX SDK 2.22 [ref]

Intel® Software Guard Extensions SDK (Intel® SGX SDK)

• Upgraded to OpenSSL 3.0.10.
• Added interoperable RA-TLS support which follows CCC design.
• Enhanced Protected File System performance and added additional dependency libsgx_pthread.a.
• Added the Constant Time instruction Decoder (CTD) into the default AEX-Notify mitigation handler in order to prevent the introduction of any additional subtle side-channel leakages within the default handler.
• Added Mistletoe 3 mitigations to the IPP Cryptography Library to the AES-ECB, AES-GCM, and AES-CMAC algorithms. These have been incorporated transparently into the sgx_tcrypto library.
• Enabled SE_TRACE log in release binary.
• Fixed bugs.

Note

When utilizing the trusted cryptography library with SGXSSL/OpenSSL 3, it's necessary to adjust the value in the enclave signing configuration XML file, specifically within the <HeapMaxSize> tag. This adjustment is particularly important for enclaves that involve multiple threads.

📦  Download information

   (click to expand)

Downloads

	Ubuntu*	Debian*	RHEL*	CentOS*	CentOS* Stream	SUSE*	Anolis OS*	CBL- Mariner*
SDK installer	- 20.04 - 22.04	- 10	- 9.2	- 8.3	- 9	- 15.4	- 8.6	- download
Local repo DEB/RPM packages	- 20.04 - 22.04	- 10	- 9.2	- 8.3	- 9	- 15.4	- 8.6	- download
Driver out-of-tree 2.11	- 20.04 - 22.04	- 10	- 9.2	- 8.3	- 9	- 15.4	- 8.6	- download
Driver DCAP 1.41	- 20.04 - 22.04	- 10	- 9.2	- 8.3	- 9	- 15.4	- 8.6	- download

• Eclipse* plug-in: 2.22

💡 TIP: Ubuntu* packages are also served from the live Intel® SGX APT repository at https://download.01.org/intel-sgx/sgx_repo/ubuntu.

---

Caution

Reference-only snapshot — predates this repository (extracted from the Intel® SGX for Linux repository). These sources mirror the SDK at this point, but the build system isn't adapted to the standalone layout; to rebuild, use the matching SGX-side tag sgx_2.22.