公开(公告)号：EP3457311B1

公开(公告)日：2020-02-26

申请号：EP18189207.6

申请日：2018-08-15

申请人： INTEL Corporation

发明人： SAHITA, Ravi L. ,  PATEL, Baiju V. ,  HUNTLEY, Barry E. ,  NEIGER, Gilbert ,  KHOSRAVI, Hormuzd M. ,  OUZIEL, Ido ,  DURHAM, David M. ,  SCHOINAS, Ioannis T. ,  CHHABRA, Siddhartha ,  ROZAS, Carlos V. ,  GERZON, Gideon

IPC分类号： G06F21/71 ,  G06F21/79 ,  G06F12/14 ,  G06F21/53 ,  G06F21/57 ,  G06F21/62 ,  H04L9/06 ,  H04L29/06 ,  G06F9/455

公开(公告)号：EP3025266B1

公开(公告)日：2019-09-11

申请号：EP14829313.7

申请日：2014-07-15

申请人： Intel Corporation

发明人： ROZAS, Carlos V. ,  ANATI, Ittai ,  GERZON, Gideon ,  GUERON, Shay ,  JOHNSON, Simon P. ,  MCKEEN, Francis X. ,  SAVAGAONKAR, Uday R. ,  SCARLATA, Vincent R.

IPC分类号： G06F21/71 ,  G06F12/14 ,  H04L9/32 ,  G06F9/30

公开(公告)号：EP3326105B1

公开(公告)日：2019-08-14

申请号：EP16828191.3

申请日：2016-06-20

申请人： Intel Corporation

发明人： CHHABRA, Siddhartha ,  GERZON, Gideon ,  LAL, Reshma ,  XING, Bin ,  PAPPACHAN, Pradeep M. ,  MCGOWAN, Steven B.

IPC分类号： G06F21/57 ,  G06F21/72 ,  H04L9/08 ,  H04L9/32

公开(公告)号：EP3326105A1

公开(公告)日：2018-05-30

申请号：EP16828191.3

申请日：2016-06-20

申请人： Intel Corporation

发明人： CHHABRA, Siddhartha ,  GERZON, Gideon ,  LAL, Reshma ,  XING, Bin ,  PAPPACHAN, Pradeep M. ,  MCGOWAN, Steven B.

IPC分类号： G06F21/60

CPC分类号： G06F21/72 ,  G06F21/57 ,  H04L9/0822 ,  H04L9/0861 ,  H04L9/3242

摘要： Technologies for secure programming of a cryptographic engine include a computing device with a cryptographic engine and one or more I/O controllers. The computing device establishes, an invoking secure enclave using secure enclave support of a processor. The invoking enclave configures channel programming information, including a channel key, and invokes a processor instruction with the channel programming information as a parameter. The processor generates wrapped programming information including an encrypted channel key and a message authentication code. The encrypted channel key is protected with a key known only to the processor. The invoking enclave provides the wrapped programming information to untrusted software, which invokes a processor instruction with the wrapped programming information as a parameter. The processor unwraps and verifies the wrapped programming information and then programs the cryptographic engine. The processor generates an authenticated response that may be verified by the invoking enclave. Other embodiments are described and claimed.