Intel(R) SGX DCAP 1.17 Release

Applied CVE-2023-1255, CVE-2023-0465, and CVE-2023-0466 patches to SgxSSL/OpenSSL 1.1.1t. Upgraded to Intel(R) Integrated Performance Primitives (IPP) Cryptography library version 2021.7. Upgraded Intel SGX Quote Verification Enclave to integrate updated SgxSSL. Enhanced the attestation local cache functionality by giving users the option to provide their own cache file. Enabled QPL/QCNL log in DCAP samples. Fixed bugs. Signed-off-by: Li, Xun <xun.li@intel.com>
intel · Jul 21, 2023 · 0443ae2 · 0443ae2
1 parent 4cb5c8b
commit 0443ae2
Show file tree

Hide file tree

Showing 172 changed files with 8,855 additions and 2,250 deletions.
diff --git a/QuoteGeneration/Makefile b/QuoteGeneration/Makefile
@@ -76,7 +76,7 @@ qve_wrapper:
 
 
 .PHONY: deb_sgx_dcap_ql_pkg
-deb_sgx_dcap_ql_pkg: $(CHECK_OPT) pce_logic qe3_logic qve_wrapper
+deb_sgx_dcap_ql_pkg: $(CHECK_OPT) pce_logic qe3_logic
 	./installer/linux/deb/libsgx-dcap-ql/build.sh
 
 .PHONY: deb_sgx_dcap_quote_verify_pkg

diff --git a/QuoteGeneration/README.md b/QuoteGeneration/README.md
@@ -39,7 +39,7 @@ For Windows* OS
 **NOTE**:`sgx_dcap_dev.inf` is for Windows* Server 2016 LTSC and `sgx_dcap.inf` is for Windows* Server 2019 LTSC.
 
 ## How to install
-   Refer to the *"Installation Instructions"* section in the [Intel(R) Software Guard Extensions: Data Center Attestation Primitives Installation Guide For Windows* OS](https://download.01.org/intel-sgx/sgx-dcap/1.16/windows/docs/Intel_SGX_DCAP_Windows_SW_Installation_Guide.pdf) to install the right packages on your platform.
+   Refer to the *"Installation Instructions"* section in the [Intel(R) Software Guard Extensions: Data Center Attestation Primitives Installation Guide For Windows* OS](https://download.01.org/intel-sgx/sgx-dcap/1.17/windows/docs/Intel_SGX_DCAP_Windows_SW_Installation_Guide.pdf) to install the right packages on your platform.
 
 
 For Linux* OS

diff --git a/QuoteGeneration/common/inc/internal/se_version.h b/QuoteGeneration/common/inc/internal/se_version.h
@@ -28,21 +28,21 @@
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  *
  */
-#define STRFILEVER    "1.16.100.2"
+#define STRFILEVER    "1.17.100.4"
 #define COPYRIGHT      "Copyright (C) 2023 Intel Corporation"
-#define FILEVER        1,16,100,2
-#define PRODUCTVER     1,16,100,2
-#define STRPRODUCTVER  "1.16.100.2"
+#define FILEVER        1,17,100,4
+#define PRODUCTVER     1,17,100,4
+#define STRPRODUCTVER  "1.17.100.4"
 #define COMPANYNAME    "Intel Corporation"
 #define PRODUCTNAME    "Intel® Software Guard Extensions"
 
-#define DEFAULT_QPL_VERSION          "1.13.103.2"
-#define QUOTE_VERIFIER_VERSION       "1.12.103.2"
-#define QUOTE_LOADER_VERSION         "1.11.106.2"
-#define TDQE_WRAPPER_VERSION         "1.14.103.2"
-#define PCE_WRAPPER_VERSION          "1.14.103.2"
+#define DEFAULT_QPL_VERSION          "1.13.104.4"
+#define QUOTE_VERIFIER_VERSION       "1.12.104.4"
+#define QUOTE_LOADER_VERSION         "1.11.104.4"
+#define TDQE_WRAPPER_VERSION         "1.14.104.4"
+#define PCE_WRAPPER_VERSION          "1.14.104.4"
 
 #define QE3_VERSION                  "1.16.100.1"
-#define QVE_VERSION                  "1.16.100.1"
+#define QVE_VERSION                  "1.17.100.1"
 #define IDE_VERSION                  "1.16.100.1"
 #define TDQE_VERSION                 "1.16.100.1"
diff --git a/QuoteGeneration/download_prebuilt.bat b/QuoteGeneration/download_prebuilt.bat
@@ -29,9 +29,9 @@
 
 @echo off
 
-set ae_file_name=prebuilt_windows_dcap_1.16.zip
-set checksum_file=SHA256SUM_prebuilt_windows_dcap_1.16.cfg
-set server_url_path=https://download.01.org/intel-sgx/sgx-dcap/1.16/windows/
+set ae_file_name=prebuilt_windows_dcap_1.17.zip
+set checksum_file=SHA256SUM_prebuilt_windows_dcap_1.17.cfg
+set server_url_path=https://download.01.org/intel-sgx/sgx-dcap/1.17/windows/
 set server_ae_url=%server_url_path%/%ae_file_name%
 set server_checksum_url=%server_url_path%/%checksum_file%
 

diff --git a/QuoteGeneration/download_prebuilt.sh b/QuoteGeneration/download_prebuilt.sh
@@ -32,9 +32,9 @@
 
 top_dir=`dirname $0`
 out_dir=$top_dir
-ae_file_name=prebuilt_dcap_1.16.tar.gz
-checksum_file=SHA256SUM_prebuilt_dcap_1.16.cfg
-server_url_path=https://download.01.org/intel-sgx/sgx-dcap/1.16/linux/
+ae_file_name=prebuilt_dcap_1.17.tar.gz
+checksum_file=SHA256SUM_prebuilt_dcap_1.17.cfg
+server_url_path=https://download.01.org/intel-sgx/sgx-dcap/1.17/linux/
 server_ae_url=$server_url_path/$ae_file_name
 server_checksum_url=$server_url_path/$checksum_file
 

diff --git a/QuoteGeneration/installer/linux/common/sgx-dcap-pccs/Makefile b/QuoteGeneration/installer/linux/common/sgx-dcap-pccs/Makefile
@@ -38,11 +38,11 @@ PCCS_CONF=pccs.service
 PCCS_CONF_PATH=$(if $(wildcard /run/systemd/system/.),$(if $(wildcard /lib/systemd/system/.),/lib/systemd/system,/usr/lib/systemd/system),$(if $(wildcard /etc/init/.),/etc/init/))
 
 ifeq ($(PCCS_CONF_PATH),)
-ifneq ($(shell awk -F/ '$$2 == "docker"' /proc/self/cgroup),)
+ifeq ($(BUILD_PLATFORM),docker)
 PCCS_CONF_PATH=/lib/systemd/system
 $(warning "You may need to start service manually after it's installed!")
 else
-(error "Unsupported platform - neither systemctl nor initctl is found!")
+$(error "Unsupported platform - neither systemctl nor initctl is found!")
 endif
 endif
 

diff --git a/QuoteGeneration/installer/linux/common/tdx-qgs/Makefile b/QuoteGeneration/installer/linux/common/tdx-qgs/Makefile
@@ -39,7 +39,7 @@ QGSD_CONF_DEL=$(if $(wildcard /run/systemd/system/.*),qgsd.conf,$(if $(wildcard
 QGSD_CONF_PATH=$(if $(wildcard /run/systemd/system/.*),$(if $(wildcard /lib/systemd/system/.*),/lib/systemd/system,/usr/lib/systemd/system),$(if $(wildcard /etc/init/.*),/etc/init/))
 
 ifeq ($(QGSD_CONF_NAME),)
-ifneq ($(shell awk -F/ '$$2 == "docker"' /proc/self/cgroup),)
+ifeq ($(BUILD_PLATFORM),docker)
 QGSD_CONF_NAME=qgsd.service
 QGSD_CONF_DEL=qgsd.conf
 QGSD_CONF_PATH=/lib/systemd/system

diff --git a/...ion/installer/linux/deb/libsgx-dcap-default-qpl/libsgx-dcap-default-qpl-1.0/debian/postrm b/...ion/installer/linux/deb/libsgx-dcap-default-qpl/libsgx-dcap-default-qpl-1.0/debian/postrm
@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+# postrm script for libsgx-dcap-default-qpl
+#
+# see: dh_installdeb(1)
+
+set -e
+
+# summary of how this script can be called:
+#        * <postrm> `remove'
+#        * <postrm> `purge'
+#        * <old-postrm> `upgrade' <new-version>
+#        * <new-postrm> `failed-upgrade' <old-version>
+#        * <new-postrm> `abort-install'
+#        * <new-postrm> `abort-install' <old-version>
+#        * <new-postrm> `abort-upgrade' <old-version>
+#        * <disappearer's-postrm> `disappear' <overwriter>
+#          <overwriter-version>
+# for details, see http://www.debian.org/doc/debian-policy/ or
+# the debian-policy package
+
+
+case "$1" in
+    remove)
+    ;;
+
+    purge)
+        # Remove program generated files
+        # Define the directories to search
+        user_home=$(getent passwd "$SUDO_USER" | cut -d: -f6)
+        directories=("$AZDCAP_CACHE" "$XDG_CACHE_HOME" "$HOME" "$user_home" "$TMPDIR" "/tmp")
+
+        # Loop through the directories
+        for dir in "${directories[@]}"; do
+            # Check if the directory exists and is not empty
+            if [ -n "$dir" ] && [ -d "$dir" ]; then
+                # Check for the existence of the .dcap_qcnl subdirectory and delete it
+                if [ -d "$dir/.dcap-qcnl" ]; then
+                    rm -rf "$dir/.dcap-qcnl"
+                fi
+            fi
+        done
+    ;;
+
+    upgrade|failed-upgrade|abort-install|abort-upgrade|disappear)
+    ;;
+
+    *)
+        echo "postrm called with unknown argument \`$1'" >&2
+        exit 1
+    ;;
+esac
+
+# dh_installdeb will replace this with shell code automatically
+# generated by other debhelper scripts.
+
+#DEBHELPER#
+
+exit 0
diff --git a/QuoteGeneration/installer/linux/deb/libsgx-dcap-ql/libsgx-dcap-ql-1.0/debian/control b/QuoteGeneration/installer/linux/deb/libsgx-dcap-ql/libsgx-dcap-ql-1.0/debian/control
@@ -9,11 +9,11 @@ Homepage: https://github.com/intel/SGXDataCenterAttestationPrimitives
 Package: libsgx-dcap-ql
 Architecture: amd64
 Depends: libsgx-qe3-logic(>= @dep_version@), libsgx-pce-logic(>= @dep_version@), ${shlibs:Depends}, ${misc:Depends}
-Recommends: libsgx-dcap-quote-verify(>= @dep_version@), libsgx-quote-ex(>= 2.19)
+Recommends: libsgx-dcap-quote-verify(>= @dep_version@), libsgx-quote-ex(>= 2.20)
 Description: Intel(R) Software Guard Extensions Data Center Attestation Primitives
 
 Package: libsgx-dcap-ql-dev
 Section: devel
 Architecture: amd64
-Depends: libsgx-dcap-ql (= @dep_version@), libsgx-headers (>= 2.19)
+Depends: libsgx-dcap-ql (= @dep_version@), libsgx-headers (>= 2.20)
 Description: Intel(R) Software Guard Extensions Data Center Attestation Primitives For Developers
diff --git a/.../installer/linux/deb/libsgx-dcap-quote-verify/libsgx-dcap-quote-verify-1.0/debian/control b/.../installer/linux/deb/libsgx-dcap-quote-verify/libsgx-dcap-quote-verify-1.0/debian/control
@@ -9,11 +9,11 @@ Homepage: https://github.com/intel/SGXDataCenterAttestationPrimitives
 Package: libsgx-dcap-quote-verify
 Architecture: amd64
 Depends: ${shlibs:Depends}, ${misc:Depends}
-Recommends: libsgx-ae-qve (>= @dep_version@), libsgx-urts (>= 2.19)
+Recommends: libsgx-ae-qve (>= @dep_version@), libsgx-urts (>= 2.20)
 Description: Intel(R) Software Guard Extensions Data Center Attestation Primitives
 
 Package: libsgx-dcap-quote-verify-dev
 Section: devel
 Architecture: amd64
-Depends: libsgx-dcap-quote-verify (= @dep_version@), libsgx-headers (>= 2.19)
+Depends: libsgx-dcap-quote-verify (= @dep_version@), libsgx-headers (>= 2.20)
 Description: Intel(R) Software Guard Extensions Data Center Attestation Primitives For Developers
diff --git a/QuoteGeneration/installer/linux/deb/libsgx-pce-logic/libsgx-pce-logic-1.0/debian/control b/QuoteGeneration/installer/linux/deb/libsgx-pce-logic/libsgx-pce-logic-1.0/debian/control
@@ -8,5 +8,5 @@ Homepage: https://github.com/intel/SGXDataCenterAttestationPrimitives
 
 Package: libsgx-pce-logic
 Architecture: amd64
-Depends: libsgx-urts (>= 2.19), libsgx-ae-pce(>= 2.19), ${shlibs:Depends}, ${misc:Depends}
+Depends: libsgx-urts (>= 2.20), libsgx-ae-pce(>= 2.20), ${shlibs:Depends}, ${misc:Depends}
 Description: Intel(R) Software Guard Extensions Data Center Attestation Primitives
diff --git a/QuoteGeneration/installer/linux/deb/libsgx-qe3-logic/libsgx-qe3-logic-1.0/debian/control b/QuoteGeneration/installer/linux/deb/libsgx-qe3-logic/libsgx-qe3-logic-1.0/debian/control
@@ -8,5 +8,5 @@ Homepage: https://github.com/intel/SGXDataCenterAttestationPrimitives
 
 Package: libsgx-qe3-logic
 Architecture: amd64
-Depends: libsgx-urts (>= 2.19), libsgx-ae-qe3(>= @dep_version@), libsgx-ae-id-enclave(>= @dep_version@), ${shlibs:Depends}, ${misc:Depends}
+Depends: libsgx-urts (>= 2.20), libsgx-ae-qe3(>= @dep_version@), libsgx-ae-id-enclave(>= @dep_version@), ${shlibs:Depends}, ${misc:Depends}
 Description: Intel(R) Software Guard Extensions Data Center Attestation Primitives
diff --git a/QuoteGeneration/installer/linux/deb/libsgx-tdx-logic/libsgx-tdx-logic-1.0/debian/control b/QuoteGeneration/installer/linux/deb/libsgx-tdx-logic/libsgx-tdx-logic-1.0/debian/control
@@ -8,11 +8,11 @@ Homepage: https://github.com/intel/SGXDataCenterAttestationPrimitives
 
 Package: libsgx-tdx-logic
 Architecture: amd64
-Depends: libsgx-urts (>= 2.19), libsgx-pce-logic(>= @dep_version@), libsgx-ae-tdqe(>= @dep_version@), libsgx-ae-id-enclave(>= @dep_version@), ${shlibs:Depends}, ${misc:Depends}
+Depends: libsgx-urts (>= 2.20), libsgx-pce-logic(>= @dep_version@), libsgx-ae-tdqe(>= @dep_version@), libsgx-ae-id-enclave(>= @dep_version@), ${shlibs:Depends}, ${misc:Depends}
 Description: Intel(R) Trust Domain Extensions QE logic library
 
 Package: libsgx-tdx-logic-dev
 Section: devel
 Architecture: amd64
-Depends: libsgx-tdx-logic (= @dep_version@), libsgx-headers (>= 2.19)
+Depends: libsgx-tdx-logic (= @dep_version@), libsgx-headers (>= 2.20)
 Description: Intel(R) Trust Domain Extensions QE logic library For Developers
diff --git a/QuoteGeneration/installer/linux/rpm/libsgx-dcap-ql/libsgx-dcap-ql.spec b/QuoteGeneration/installer/linux/rpm/libsgx-dcap-ql/libsgx-dcap-ql.spec
@@ -37,7 +37,7 @@ Release:        1%{?dist}
 Summary:        Intel(R) Software Guard Extensions Data Center Attestation Primitives
 Group:          Development/Libraries
 Requires:       libsgx-qe3-logic >= %{version}-%{release} libsgx-pce-logic >= %{version}-%{release}
-Recommends:     libsgx-dcap-quote-verify >= %{version}-%{release} libsgx-quote-ex >= 2.19
+Recommends:     libsgx-dcap-quote-verify >= %{version}-%{release} libsgx-quote-ex >= 2.20
 
 License:        BSD License
 URL:            https://github.com/intel/SGXDataCenterAttestationPrimitives
@@ -49,7 +49,7 @@ Intel(R) Software Guard Extensions Data Center Attestation Primitives
 %package devel
 Summary:        Intel(R) Software Guard Extensions Data Center Attestation Primitives for Developers
 Group:          Development/Libraries
-Requires:       %{name} = %{version}-%{release} libsgx-headers >= 2.19
+Requires:       %{name} = %{version}-%{release} libsgx-headers >= 2.20
 
 %description devel
 Intel(R) Software Guard Extensions Data Center Attestation Primitives for Developers

diff --git a/QuoteGeneration/installer/linux/rpm/libsgx-dcap-quote-verify/libsgx-dcap-quote-verify.spec b/QuoteGeneration/installer/linux/rpm/libsgx-dcap-quote-verify/libsgx-dcap-quote-verify.spec
@@ -36,7 +36,7 @@ Version:        @version@
 Release:        1%{?dist}
 Summary:        Intel(R) Software Guard Extensions Data Center Attestation Primitives
 Group:          Development/Libraries
-Recommends:     libsgx-ae-qve >= %{version}-%{release} libsgx-urts >= 2.19
+Recommends:     libsgx-ae-qve >= %{version}-%{release} libsgx-urts >= 2.20
 
 License:        BSD License
 URL:            https://github.com/intel/SGXDataCenterAttestationPrimitives
@@ -48,7 +48,7 @@ Intel(R) Software Guard Extensions Data Center Attestation Primitives
 %package devel
 Summary:        Intel(R) Software Guard Extensions Data Center Attestation Primitives for Developers
 Group:          Development/Libraries
-Requires:       %{name} = %{version}-%{release} libsgx-headers >= 2.19
+Requires:       %{name} = %{version}-%{release} libsgx-headers >= 2.20
 
 %description devel
 Intel(R) Software Guard Extensions Data Center Attestation Primitives for Developers

diff --git a/QuoteGeneration/installer/linux/rpm/libsgx-pce-logic/libsgx-pce-logic.spec b/QuoteGeneration/installer/linux/rpm/libsgx-pce-logic/libsgx-pce-logic.spec
@@ -36,7 +36,7 @@ Version:        @version@
 Release:        1%{?dist}
 Summary:        Intel(R) Software Guard Extensions PCE logic
 Group:          Development/Libraries
-Requires:       libsgx-urts >= 2.19 libsgx-ae-pce >= 2.19
+Requires:       libsgx-urts >= 2.20 libsgx-ae-pce >= 2.20
 
 License:        BSD License
 URL:            https://github.com/intel/SGXDataCenterAttestationPrimitives

diff --git a/QuoteGeneration/installer/linux/rpm/libsgx-qe3-logic/libsgx-qe3-logic.spec b/QuoteGeneration/installer/linux/rpm/libsgx-qe3-logic/libsgx-qe3-logic.spec
@@ -36,7 +36,7 @@ Version:        @version@
 Release:        1%{?dist}
 Summary:        Intel(R) Software Guard Extensions QE3 logic
 Group:          Development/Libraries
-Requires:       libsgx-urts >= 2.19 libsgx-ae-qe3 >= %{version}-%{release} libsgx-ae-id-enclave >= %{version}-%{release}
+Requires:       libsgx-urts >= 2.20 libsgx-ae-qe3 >= %{version}-%{release} libsgx-ae-id-enclave >= %{version}-%{release}
 
 License:        BSD License
 URL:            https://github.com/intel/SGXDataCenterAttestationPrimitives

diff --git a/QuoteGeneration/installer/linux/rpm/libsgx-tdx-logic/libsgx-tdx-logic.spec b/QuoteGeneration/installer/linux/rpm/libsgx-tdx-logic/libsgx-tdx-logic.spec
@@ -36,7 +36,7 @@ Version:        @version@
 Release:        1%{?dist}
 Summary:        Intel(R) Trust Domain Extensions QE logic library
 Group:          Development/Libraries
-Requires:       libsgx-urts >= 2.19 libsgx-ae-tdqe >= %{version}-%{release}  libsgx-ae-id-enclave >= %{version}-%{release} libsgx-pce-logic >= %{version}-%{release}
+Requires:       libsgx-urts >= 2.20 libsgx-ae-tdqe >= %{version}-%{release}  libsgx-ae-id-enclave >= %{version}-%{release} libsgx-pce-logic >= %{version}-%{release}
 
 License:        BSD License
 URL:            https://github.com/intel/SGXDataCenterAttestationPrimitives
@@ -49,7 +49,7 @@ Intel(R) Trust Domain Extensions QE logic library
 %package devel
 Summary:        Intel(R) Trust Domain Extensions QE logic library For Developers 
 Group:          Development/Libraries
-Requires:       %{name} = %{version}-%{release} libsgx-headers >= 2.19
+Requires:       %{name} = %{version}-%{release} libsgx-headers >= 2.20
 %description devel
 Intel(R) Trust Domain Extensions QE logic library For Developers
 %prep

diff --git a/QuoteGeneration/installer/win/DCAP_Components.bat b/QuoteGeneration/installer/win/DCAP_Components.bat
@@ -5,7 +5,7 @@ set QGFOLDER="..\..\"
 set QVFOLDER="%TOPFOLDER%\QuoteVerification"
 set DEBUGFILEFOLDER="..\..\..\x64\Debug\"
 set RELEASEFILEFOLDER="..\..\..\x64\Release\"
-set PACKAGETNAME=DCAP_Components.1.16.100.0
+set PACKAGETNAME=DCAP_Components.1.17.100.0
 set pwd=%~dp0DCAP_Components
 
 pushd "%~dp0"

diff --git a/QuoteGeneration/installer/win/DCAP_Components/DCAP_Components.nuspec b/QuoteGeneration/installer/win/DCAP_Components/DCAP_Components.nuspec
@@ -2,15 +2,15 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2010/07/nuspec.xsd">
   <metadata>
     <id>DCAP_Components</id>
-    <version>1.16.100.2</version>
+    <version>1.17.100.4</version>
     <title>DCAP Components</title>
     <authors>Intel(R) SGX</authors>
     <owners>Intel</owners>
     <requireLicenseAcceptance>false</requireLicenseAcceptance>
     <description>DCAP Components</description>
-    <copyright>Copyright (C) 2023 Intel Corporation</copyright>
+    <copyright>Copyright (C) 2022 Intel Corporation</copyright>
     <dependencies>
-      <dependency id="SgxHeaders" version="2.18.100.2" />
+      <dependency id="SgxHeaders" version="2.19.100.4" />
     </dependencies>
   </metadata>
   <files>

diff --git a/QuoteGeneration/pccs/container/Dockerfile b/QuoteGeneration/pccs/container/Dockerfile
@@ -1,7 +1,7 @@
 FROM ubuntu:20.04 AS builder
 
 # DCAP version (github repo branch, tag or commit hash)
-ARG DCAP_VERSION=DCAP_1.16
+ARG DCAP_VERSION=DCAP_1.17
 
 # update and install packages
 RUN DEBIAN_FRONTEND=noninteractive \

diff --git a/QuoteGeneration/pccs/install.sh b/QuoteGeneration/pccs/install.sh
@@ -79,7 +79,6 @@ fi
 
 cd `dirname $0`
 npm config set proxy $http_proxy
-npm config set http-proxy $http_proxy
 npm config set https-proxy $https_proxy
 npm config set engine-strict true
 npm install

diff --git a/QuoteGeneration/pccs/lib_wrapper/pcklib_wrapper.js b/QuoteGeneration/pccs/lib_wrapper/pcklib_wrapper.js
@@ -82,8 +82,8 @@ export function pck_cert_select(
   my_cpu_svn.bytes = new ByteArray();
   for (let i = 0; i < buf.length; i++) my_cpu_svn.bytes[i] = buf[i];
 
-  let my_pce_svn = Buffer.from(pce_svn, 'hex').readInt16LE();
-  let my_pce_id = Buffer.from(pce_id, 'hex').readInt16LE();
+  let my_pce_svn = Buffer.from(pce_svn, 'hex').readUInt16LE();
+  let my_pce_id = Buffer.from(pce_id, 'hex').readUInt16LE();
   let best_index_ptr = refNAPI.alloc('int');
   let ret = pcklib.pck_cert_select(
     my_cpu_svn.ref(),

diff --git a/QuoteGeneration/pccs/services/pccs_schemas.js b/QuoteGeneration/pccs/services/pccs_schemas.js
@@ -55,7 +55,7 @@ export const PLATFORM_REG_SCHEMA = {
       pattern: '^[a-fA-F0-9]{768}$',
     },
     platform_manifest: {
-      type: 'string',
+      type: ['string','null'],
     },
   },
   required: ['qe_id', 'pce_id'],
@@ -93,7 +93,7 @@ export const PLATFORM_COLLATERAL_SCHEMA_V3 = {
             pattern: '^[a-fA-F0-9]{768}$|^$',
           },
           platform_manifest: {
-            type: 'string',
+            type: ['string','null'],
           },
         },
         required: ['qe_id', 'pce_id'],
@@ -121,7 +121,7 @@ export const PLATFORM_COLLATERAL_SCHEMA_V3 = {
                 pattern: '^[a-fA-F0-9]{768}$|^$',
               },
               platform_manifest: {
-                type: 'string',
+                type: ['string','null'],
               },
               certs: {
                 type: 'array',
@@ -475,7 +475,7 @@ export const PLATFORM_COLLATERAL_SCHEMA_V4 = {
             pattern: '^[a-fA-F0-9]{768}$|^$',
           },
           platform_manifest: {
-            type: 'string',
+            type: ['string','null'],
           },
         },
         required: ['qe_id', 'pce_id'],
@@ -506,7 +506,7 @@ export const PLATFORM_COLLATERAL_SCHEMA_V4 = {
                 pattern: '^[a-fA-F0-9]{768}$|^$',
               },
               platform_manifest: {
-                type: 'string',
+                type: ['string','null'],
               },
               certs: {
                 type: 'array',

diff --git a/QuoteGeneration/psw/ae/data/prebuilt/README.md b/QuoteGeneration/psw/ae/data/prebuilt/README.md
@@ -5,7 +5,7 @@ The PCE is part of Intel(R) Software Guard Extensions for Linux\* OS which is pu
 The QE3 is part of [Intel(R) Software Guard Extensions Data Center Attestation Primitives](https://github.com/intel/SGXDataCenterAttestationPrimitives/) Github repository. The libsgx_qe3.signed.so in prebuilt package is built by [qe3](https://github.com/intel/SGXDataCenterAttestationPrimitives/tree/master/QuoteGeneration/quote_wrapper/quote/enclave) with branch [sgx_2.19_reproducible](https://github.com/intel/linux-sgx/tree/sgx_2.19_reproducible) and signed by Intel.
 
 # QVE source code
-The QVE is part of [Intel(R) Software Guard Extensions Data Center Attestation Primitives](https://github.com/intel/SGXDataCenterAttestationPrimitives/) Github repository. The libsgx_qve.signed.so in prebuilt package is built by [qve](https://github.com/intel/SGXDataCenterAttestationPrimitives/tree/master/QuoteVerification/QvE/Enclave) with branch [sgx_2.19_reproducible](https://github.com/intel/linux-sgx/tree/sgx_2.19_reproducible)and signed by Intel.
+The QVE is part of [Intel(R) Software Guard Extensions Data Center Attestation Primitives](https://github.com/intel/SGXDataCenterAttestationPrimitives/) Github repository. The libsgx_qve.signed.so in prebuilt package is built by [qve](https://github.com/intel/SGXDataCenterAttestationPrimitives/tree/master/QuoteVerification/QvE/Enclave) with branch [sgx_2.20_reproducible](https://github.com/intel/linux-sgx/tree/sgx_2.20_reproducible)and signed by Intel.
 
 # IDE source code
 The IDE is part of [Intel(R) Software Guard Extensions Data Center Attestation Primitives](https://github.com/intel/SGXDataCenterAttestationPrimitives/) Github repository. The libsgx_id_enclave.signed.so in prebuilt package is built by [id_enclave](https://github.com/intel/SGXDataCenterAttestationPrimitives/tree/master/QuoteGeneration/quote_wrapper/quote/id_enclave) with branch [sgx_2.19_reproducible](https://github.com/intel/linux-sgx/tree/sgx_2.19_reproducible) and signed by Intel.