New
Release 0.6.0
Changes since 0.5.3 include:
- LVI vulnerability mitigations
- Bazel transitions support
- Efficient synchronization primitives
- Remote attestation support complete. See
SgxIntelEcdsaQeRemoteAssertionGeneratorandEnclaveCredentialsOptions. - Utility provided to fetch PCK certificates from Intel’s PCS
- Support for Intel’s (soon-to-be) upstream SGX kernel driver. Asylo now supports both Intel’s separate GitHub SGX kernel driver and the version being integrated with the main Linux kernel tree.
- Additional input validation for
fork()and . Fixes vulnerabilities reported by Baidu Security (commits: e582f36a, 299f804a).