2018/01/17 by Thomas Knauth, Michael Steiner, Knauth, Thomas +10 · 1 voice · 1 citation
Computer Science · #Advanced Malware Detection Techniques #Cloud Data Security Solutions #Cryptography and Security (cs.CR) #FOS: Computer and information sciences #Security and Verification in Computing #cs.CR
paper · pdf · doi:10.48550/arxiv.1801.05863
openalex publication_date 2018/01/17 · arxiv published 2018/01/17 · arxiv updated 2019/07/26 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28
Intel(R) Software Guard Extensions (Intel(R) SGX) is a promising technology to securely process information in otherwise untrusted environments. An important aspect of Intel SGX is the ability to perform remote attestation to assess the endpoint's trustworthiness. Ultimately, remote attestation will result in an attested secure channel to provision secrets to the enclave. We seamlessly combine Intel SGX remote attestation with the establishment of a standard Transport Layer Security (TLS) connection. Remote attestation is performed during the connection setup. To achieve this, we neither change the TLS protocol, nor do we modify existing protocol implementations. We have prototype implementations for three widely used open-source TLS libraries: OpenSSL, wolfSSL and mbedTLS. We describe the requirements, design and implementation details to seamlessly bind attested TLS endpoints to Intel SGX enclaves.