Intel ID: INTEL-SA-00135
Product family: Intel® SGX SDK and Intel® SGX Platform Software
Impact of vulnerability: Information Disclosure
Severity rating: Moderate
Original release: 05/10/2018
Last revised: 05/10/2018

Summary:
Intel® Software Guard Extensions Software Development Kit (SDK) and Platform Software (PSW) utilize the Intel® Integrated Performance Primitives Cryptography Library. Vulnerabilities in this cryptography library have been reported that may enable a local attacker running malware utilizing software based side channel methods to gather data concerning certain cryptographic keys.

In accordance with the recent public security advisory INTEL-SA-00106 published for the Intel® Integrated Performance Primitives Cryptography Library, new versions of the Intel® SGX SDK and Intel® SGX PSW have been released.

Affected Products:
Intel® SGX SDK and Intel® Platform Software for Windows before version 2.01.
Intel® SGX SDK and Intel® Platform Software for Linux before version 2.1.3.

Recommendations:
Intel recommends that developers recompile applications using the latest Intel® SGX SDK and update to the latest Intel® SGX Platform Software.

Intel® SGX SDK and Intel® Platform Software for Windows version 2.01.
· https://registrationcenter.intel.com...productid=2614

Intel® SGX SDK and Intel® Platform Software for Linux version 2.1.3.
· https://01.org/intel-software-guard-...ions/downloads

Acknowledgements:
Intel thanks Fergus Dall, Gabrielle De Micheli, Thomas Eisenbarth, Daniel Genkin, Nadia Heninger, Ahmad Moghimi, and Yuval Yarom for reporting this issue.

Revision History

Revision Date Description
1.0 May 10, 2018 Initial Release

Source: INTEL-SA-00135