Techniques for remote sgx enclave authentication

A computer-implemented method for enclave authentication at a client-side secure enclave, comprising:

• generating a public-private key pair (SK, PK);
• computing a cryptographic hash H of PK;
• creating a report R containing H;
• obtaining a quote Q on the report R from a quoting enclave component;
• obtaining remote attestation response RA from an attestation service;
• and
• broadcasting RA and PK to one or more server-side enclaves.

An article comprising a non-transitory computer-readable storage medium that stores instructions for execution by processing circuitry of a computing device for enclave authentication at a client-side secure enclave, the instructions to cause the computing device to:

• generate a public-private key pair (SK, PK);
• compute a cryptographic hash H of PK;
• create a report R containing H;
• obtain a quote Q on the report R from a quoting enclave component;
• obtain remote attestation response RA from an attestation service;
• and
• broadcast RA and PK to one or more server-side enclaves.

A system for enclave authentication, comprising:

• a server-side secure enclave, executed by a processor, and configured to:
• receive a remote attestation response RA including a quote Q, hash H of a public-private key pair (SK, PK), and report R;
• receive public key PK;
• store RA and PK into the server-side secure enclave;
• determine that an attestation service public report key signature on RA is valid;
• determine that a cryptographic hash of PK matches H;
• and
• accept PK as an authenticated public key of a client-side secure enclave.

A computer-implemented method for enclave authentication, comprising:

• receiving, at a server-side secure enclave, a remote attestation response RA including a quote Q, hash H of a public-private key pair (SK, PK), and report R;
• receiving, at the server-side secure enclave, public key PK;
• storing RA and PK into the server-side secure enclave;
• determining that an attestation service public report key signature on RA is valid;
• determining that a cryptographic hash of PK matches H;
• and
• accepting PK as an authenticated public key of a client-side secure enclave.