Skip to content

Intel® SGX SDK 2.30

Latest
Latest

Choose a tag to compare

View all tags
@bgotowal bgotowal released this 31 Jul 16:22
· 1 commit to main since this release
sgx_2.30
73ae8ba
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Intel® Software Guard Extensions SDK (Intel® SGX SDK)

  • Intel® Software Guard Extensions SDK
    • Intel SGX SDK source code (including samples) as well as the SGX enclave runtime libraries now reside at intel/confidential-computing.sgx.sdk and is referenced as a submodule from intel/confidential-computing.sgx.
    • Updated Intel® Cryptography Primitives Library (CPL) dependency to 2.2.0, including updating components to use new APIs and structures where applicable. Building from source now requires NASM ≥ 2.16.02.
    • Enabled an option to build Intel® Cryptography Primitives libraries from source instead of using prebuilt binaries.
    • Embedded SDK version in the installed buildenv.mk.
    • Removed Intel optimized string/math library build option (USE_OPT_LIBS=2 and USE_OPT_LIBS=3). The SDK now builds exclusively with open-source string and math implementations; the CPL-based SDK build (USE_OPT_LIBS=1) remains the default. The legacy build flavors are available in the v2.29 release archive.
  • Sample projects
    • Removed the SampleDNNL sample and its DNNL dependency (oneDNN v1.1.1, Oct 2019) from the SDK repository. The archived sample remains accessible in the v2.29 release tag.
    • Added direction bit in GCM IV to prevent nonce reuse in Local Attestation sample.
  • Other changes
    • Updated supported operating systems:
      • Added Red Hat* Enterprise Linux* Server 9.6, 9.8, 10.0, and 10.2; removed 9.4.
      • Updated SUSE* Linux Enterprise Server support to 15 SP7 and 16; removed 15.6.
      • Added Debian* 13.
    • Security hardening and bug fixes.

Note

Deprecation notice — USE_OPT_LIBS=0 (OpenSSL/SGXSSL crypto build option).
Intel plans to deprecate the OpenSSL-based (USE_OPT_LIBS=0) crypto build flavor of the SGX SDK and to remove it in a future release.
The default, CPL-based build (USE_OPT_LIBS=1) is unaffected and remains the recommended configuration.
If you rely on USE_OPT_LIBS=0, please see the migration guidance below and let us know via a GitHub issue if this affects you.

Migration guideline
  • If you built with USE_OPT_LIBS=0 only to get a working SDK → drop the flag and build the default (make sdk, i.e. USE_OPT_LIBS=1).
    The sgx_tcrypto API and sgx_tcrypto.h header are identical; no enclave source changes are required, only the backing implementation (CPL instead of OpenSSL) differs.
  • If you need OpenSSL's wider libcrypto inside the enclave → build the standalone Intel SGX SSL project (intel/intel-sgx-ssl) from source and link libsgx_tsgxssl + libsgx_tsgxssl_crypto into your enclave.
    This is independent of how the SDK was built, works alongside the default CPL-based SDK (both crypto libraries can coexist), and is already the supported way to use OpenSSL crypto in an enclave.

📦  Download information

   (click to expand)

Downloads

Ubuntu* Debian* RHEL* CentOS*
Stream		 SUSE* Anolis OS* Azure
Linux*
SDK installer - 22.04
- 24.04
- 26.04		 - 10
- 12		 - 9.6
- 9.8
- 10.0
- 10.2		 - 9
- 10		 - 15.7
- 16		 - 8.10 - 3.0
Local repo
DEB/RPM packages		 - 22.04
- 24.04
- 26.04		 - 10
- 12		 - 9.6
- 9.8
- 10.0
- 10.2		 - 9
- 10		 - 15.7
- 16		 - 8.10 - 3.0

💡 TIP: Ubuntu* packages are also served from the live Intel® SGX APT repository at https://download.01.org/intel-sgx/sgx_repo/ubuntu.

Assets 2
Loading