Skip to content

Intel® SGX SDK/PSW 2.30

Choose a tag to compare

View all tags
@bgotowal bgotowal released this 31 Jul 16:25
· 3 commits to main since this release
sgx_2.30
d64c33e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Intel® Software Guard Extensions SDK (Intel® SGX SDK)

Note

Intel SGX SDK source code (including samples) as well as the Intel SGX enclave runtime libraries now reside at intel/confidential-computing.sgx.sdk and is referenced as a submodule from intel/confidential-computing.sgx.

See Release Intel® SGX SDK 2.30 · intel/confidential-computing.sgx.sdk for its full release notes.

Intel® Software Guard Extensions Platform Software (Intel® SGX PSW)

  • Intel® SGX Architecture Enclave Service Manager (AESM)
    • Hardened socket receive path — validates IPC message length before payload read and enforces a finite client socket timeout to prevent indefinite blocking.
    • Strengthened IPC request parsing with strict protobuf dispatch validation and per-request semantic checks for attestation messages.
    • write_callback(): fixed an integer overflow.
  • Intel® SGX Runtime System Library
    • Added Intel TDX service TD extension fields (tdx_servtd_ext_t structure in sgx_quote_5.h) to support parsing the SERVTD binding information carried in TDX quotes.
    • Fixed an out-of-bounds write in the ELF parser (parse_dyn) when processing OS-specific address-range dynamic tags.
    • Extracted uRTS, libsgx-enclave-common, and libsgx-headers into a new standalone sgx-enclave-runtime RPM meta-package, splitting them out of the psw-dcap / psw-tdx specs.
  • Intel® SGX Architecture Enclaves
    • Updated the SGX Enclave Memory Manager (emm_src) to fix a coexistence bug between EDMM and AEX Notify.
    • PCE ISVSVN bumped to 0x11.
  • Other changes
    • Removed build scripts and Docker stages for the long-obsolete PSW .bin binary installer. The PSW has been delivered exclusively via DEB/RPM packages since 2019; the replacement is the {deb|rpm}_psw_aesm_pkg target.
    • Improved RPM packaging tooling: unified debug subpackage suppression across old and new RPM versions; added Debian* trixie to the local repository distributions configuration.
    • Updated supported operating systems:
      • Added Red Hat* Enterprise Linux* Server 9.6, 9.8, 10.0, and 10.2; removed 9.4.
      • Updated SUSE* Linux Enterprise Server support to 15 SP7 and 16; removed 15.6.
      • Added Debian* 13.

📦  Download information

   (click to expand)

Downloads

Ubuntu* Debian* RHEL* CentOS*
Stream		 SUSE* Anolis OS* Azure
Linux*
SDK installer - 22.04
- 24.04
- 26.04		 - 10
- 12		 - 9.6
- 9.8
- 10.0
- 10.2		 - 9
- 10		 - 15.7
- 16		 - 8.10 - 3.0
Local repo
DEB/RPM packages		 - 22.04
- 24.04
- 26.04		 - 10
- 12		 - 9.6
- 9.8
- 10.0
- 10.2		 - 9
- 10		 - 15.7
- 16		 - 8.10 - 3.0

💡 TIP: Ubuntu* packages are also served from the live Intel® SGX APT repository at https://download.01.org/intel-sgx/sgx_repo/ubuntu.

Assets 2
Loading