#Download seal offline 2013 software

#Download seal offline 2013 software

Figure 1 illustrates the steps software takes to complete this processes. The software then encrypts the data and stores it for future use. After the software is installed, it contacts the service provider to have data remotely provisioned to the enclave. Intel® SGX-enabled software does not ship with sensitive data. In order to do so, the service providers must be able to know with certainty what software is running on the remote platform and in which environment it is executing. In an era where software and services are deployed over the Internet, Intel® Software Guard Extensions (Intel® SGX), and extension to Intel® Architecture enables service providers to provision applications over the wire or air with sensitive content, and to know with confidence that their secrets are properly protected. General TermsĮnclave, Measurement, Attestation, Local Attestation, Remote Attestation, Sealing 1 INTRODUCTION These components include a method to generate a hardware based attestation of the software running inside an enclave and a means for enclave software to seal secrets and export them outside of the enclave (for example store them in non-volatile memory) such that only the same enclave software would be able un-seal them back to their original form. This paper describes the technology components that allow provisioning of secrets to an enclave. In an era where software and services are deployed over the Internet, it is critical to be able to securely provision enclaves remotely, over the wire or air, to know with confidence that the secrets are protected and to be able to save secrets in non-volatile memory for future use.

Inside the enclave, software’s code, data, and stack are protected by hardware enforced access control policies that prevent attacks against the enclave’s content. The container is referred to as an enclave.

Intel is developing the Intel® Software Guard Extensions (Intel® SGX) technology, an extension to Intel® Architecture for generating protected software containers. Ittai Anati, Shay Gueron, Simon P Johnson, Vincent R Scarlata