Intel(R) SGX DCAP 1.14 Release

Re-signed all the Intel SGX Architecture Enclaves (AEs) to address CVE-2022-21123,
  CVE-2022-21125 and CVE-2022-21166.
Added Intel TDX Attestation support.
Added Rust support for ECDSA quote verification.
Upgraded Intel ECDSA Quote Verification Enclave to integrate SgxSSL/OpenSSL
  version 1.1.1o.
Fixed bugs.

Signed-off-by: Li, Xun <xun.li@intel.com>

QuoteGeneration/Makefile

@@ -31,17 +31,28 @@
 
 CUR_MKFILE:= $(lastword $(MAKEFILE_LIST))
 
-.PHONY: all dcap opt_check_failed clean rebuild pce_logic qe3_logic qcnl_wrapper qpl_wrapper qve_wrapper
+.PHONY: all dcap opt_check_failed clean rebuild pce_logic tdx_logic tdx_qgs tdx_attest qe3_logic qcnl_wrapper qpl_wrapper qve_wrapper
 
 all: dcap
 
+#--------------------------------------------------------------------------------------
+# Function: get_distr_info
+# Arguments: 1: the grep keyword to be searched from /etc/os-release
+# Returns: Return the value for the Linux distribution info corresponding to the keyword
+#---------------------------------------------------------------------------------------
+get_distr_info = $(patsubst "%",%,$(shell grep $(1) /etc/os-release 2> /dev/null | awk -F'=' '{print $$2}'))
+
+DISTR_ID := $(call get_distr_info, '^ID=')
+DISTR_VER := $(call get_distr_info, '^VERSION_ID=')
+
+
 # DCAP requires prebuilt enclaves.
 CHECK_OPT :=
 ifeq ("$(wildcard psw/ae/data/prebuilt)", "")
 CHECK_OPT := opt_check_failed
 endif
 
-dcap: $(CHECK_OPT) pce_logic qe3_logic qcnl_wrapper qpl_wrapper qve_wrapper
+dcap: tdx_logic tdx_qgs tdx_attest $(CHECK_OPT) pce_logic qe3_logic qcnl_wrapper qpl_wrapper qve_wrapper tdx_qe id_enclave
 
 opt_check_failed:
 	@echo "Please run download_prebuilt.sh before compiling"
@@ -50,6 +61,8 @@ opt_check_failed:
 
 pce_logic:
 	$(MAKE) -C pce_wrapper/linux
+id_enclave:
+	$(MAKE) -C quote_wrapper/quote/id_enclave/linux
 
 qe3_logic: pce_logic
 	$(MAKE) -C quote_wrapper/ql/linux
@@ -95,6 +108,35 @@ deb_sgx_ae_id_enclave_pkg: $(CHECK_OPT)
 deb_sgx_ae_qve_pkg: $(CHECK_OPT)
 	./installer/linux/deb/libsgx-ae-qve/build.sh
 
+.PHONY: deb_sgx_ae_tdqe_pkg deb_sgx_tdx_logic_pkg deb_sgx_tdx_qgs_pkg deb_sgx_tdx_attest_pkg
+ifeq ($(DISTR_ID)$(DISTR_VER),ubuntu18.04)
+tdx_qe deb_sgx_ae_tdqe_pkg:
+	echo "Skip tdqe in ubuntu 18.04"
+tdx_logic deb_sgx_tdx_logic_pkg:
+	echo "Skip tdx_logic in ubuntu 18.04"
+tdx_qgs deb_sgx_tdx_qgs_pkg:
+	echo "Skip tdx_qgs in ubuntu 18.04"
+tdx_attest deb_sgx_tdx_attest_pkg:
+	echo "Skip tdx_attest in ubuntu 18.04"
+else
+tdx_qe:
+	$(MAKE) -C quote_wrapper/tdx_quote/enclave/linux
+tdx_logic: pce_logic
+	$(MAKE) -C quote_wrapper/tdx_quote/linux
+tdx_qgs: tdx_logic
+	$(MAKE) -C quote_wrapper/qgs
+tdx_attest:
+	$(MAKE) -C quote_wrapper/tdx_attest/linux
+deb_sgx_ae_tdqe_pkg: $(CHECK_OPT)
+	./installer/linux/deb/libsgx-ae-tdqe/build.sh
+deb_sgx_tdx_logic_pkg: tdx_logic
+	./installer/linux/deb/libsgx-tdx-logic/build.sh
+deb_sgx_tdx_qgs_pkg: tdx_qgs
+	./installer/linux/deb/tdx-qgs/build.sh
+deb_sgx_tdx_attest_pkg: tdx_attest
+	./installer/linux/deb/libtdx-attest/build.sh
+endif
+
 .PHONY: deb_sgx_qe3_logic_pkg
 deb_sgx_qe3_logic_pkg: qe3_logic
 	./installer/linux/deb/libsgx-qe3-logic/build.sh
@@ -114,7 +156,7 @@ deb_sgx_ra_service_pkg:
 
 
 .PHONY: deb_pkg
-deb_pkg: deb_sgx_pce_logic_pkg deb_sgx_qe3_logic_pkg deb_sgx_dcap_ql_pkg deb_sgx_dcap_quote_verify_pkg deb_sgx_dcap_default_qpl_pkg deb_sgx_dcap_pccs_pkg deb_sgx_ae_qe3_pkg deb_sgx_ae_id_enclave_pkg deb_sgx_ae_qve_pkg deb_sgx_pck_id_retrieval_tool_pkg deb_sgx_ra_service_pkg
+deb_pkg: deb_sgx_pce_logic_pkg deb_sgx_qe3_logic_pkg deb_sgx_dcap_ql_pkg deb_sgx_dcap_quote_verify_pkg deb_sgx_dcap_default_qpl_pkg deb_sgx_dcap_pccs_pkg deb_sgx_ae_qe3_pkg deb_sgx_ae_tdqe_pkg deb_sgx_ae_id_enclave_pkg deb_sgx_ae_qve_pkg deb_sgx_tdx_logic_pkg deb_sgx_tdx_qgs_pkg deb_sgx_tdx_attest_pkg deb_sgx_pck_id_retrieval_tool_pkg deb_sgx_ra_service_pkg
 	@$(RM) -f ./installer/linux/deb/*.deb ./installer/linux/deb/*.ddeb
 	cp `find ./installer/linux/deb/ -name "*.deb" -o -name "*.ddeb"` ./installer/linux/deb/
 	cp `find ../tools/PCKRetrievalTool/installer/deb/ -name "*.deb" -o -name "*.ddeb"` ./installer/linux/deb/
@@ -139,13 +181,25 @@ rpm_sgx_dcap_pccs_pkg:
 rpm_sgx_ae_qe3_pkg: $(CHECK_OPT)
 	./installer/linux/rpm/libsgx-ae-qe3/build.sh
 
+.PHONY: rpm_sgx_ae_tdqe_pkg
+rpm_sgx_ae_tdqe_pkg: $(CHECK_OPT)
+	./installer/linux/rpm/libsgx-ae-tdqe/build.sh
 .PHONY: rpm_sgx_ae_id_enclave_pkg
 rpm_sgx_ae_id_enclave_pkg: $(CHECK_OPT)
 	./installer/linux/rpm/libsgx-ae-id-enclave/build.sh
 
 .PHONY: rpm_sgx_ae_qve_pkg
 rpm_sgx_ae_qve_pkg: $(CHECK_OPT) qve_wrapper
 	./installer/linux/rpm/libsgx-ae-qve/build.sh
+.PHONY: rpm_sgx_tdx_logic_pkg
+rpm_sgx_tdx_logic_pkg: tdx_logic
+	./installer/linux/rpm/libsgx-tdx-logic/build.sh
+.PHONY: rpm_sgx_tdx_qgs_pkg
+rpm_sgx_tdx_qgs_pkg: tdx_qgs
+	./installer/linux/rpm/tdx-qgs/build.sh
+.PHONY: rpm_sgx_tdx_attest_pkg
+rpm_sgx_tdx_attest_pkg: tdx_attest
+	./installer/linux/rpm/libtdx-attest/build.sh
 
 .PHONY: rpm_sgx_dcap_quote_verify_pkg
 rpm_sgx_dcap_quote_verify_pkg: $(CHECK_OPT) qve_wrapper
@@ -169,7 +223,7 @@ rpm_sgx_ra_service_pkg:
 	$(MAKE) -C ../tools/SGXPlatformRegistration/ rpm_pkg
 
 .PHONY: rpm_pkg
-rpm_pkg: rpm_sgx_dcap_ql_pkg rpm_sgx_dcap_default_qpl_pkg rpm_sgx_dcap_pccs_pkg rpm_sgx_ae_qe3_pkg rpm_sgx_ae_id_enclave_pkg rpm_sgx_ae_qve_pkg rpm_sgx_dcap_quote_verify_pkg rpm_sgx_pce_logic_pkg rpm_sgx_qe3_logic_pkg rpm_sgx_pck_id_retrieval_tool_pkg rpm_sgx_ra_service_pkg
+rpm_pkg: rpm_sgx_dcap_ql_pkg rpm_sgx_dcap_default_qpl_pkg rpm_sgx_dcap_pccs_pkg rpm_sgx_ae_qe3_pkg rpm_sgx_ae_tdqe_pkg rpm_sgx_ae_id_enclave_pkg rpm_sgx_ae_qve_pkg rpm_sgx_tdx_logic_pkg rpm_sgx_tdx_qgs_pkg rpm_sgx_tdx_attest_pkg rpm_sgx_dcap_quote_verify_pkg rpm_sgx_pce_logic_pkg rpm_sgx_qe3_logic_pkg rpm_sgx_pck_id_retrieval_tool_pkg rpm_sgx_ra_service_pkg
 	@$(RM) -f ./installer/linux/rpm/*.rpm
 	cp `find ./installer/linux/rpm/ -name "*.rpm"` ./installer/linux/rpm/
 	cp `find ../tools/PCKRetrievalTool/installer/rpm/ -name "*.rpm"` ./installer/linux/rpm/
@@ -178,6 +232,9 @@ rpm_pkg: rpm_sgx_dcap_ql_pkg rpm_sgx_dcap_default_qpl_pkg rpm_sgx_dcap_pccs_pkg
 clean:
 	$(MAKE) -C pce_wrapper/linux clean
 	$(MAKE) -C quote_wrapper/ql/linux clean
+	$(MAKE) -C quote_wrapper/qgs clean
+	$(MAKE) -C quote_wrapper/tdx_quote/linux clean
+	$(MAKE) -C quote_wrapper/tdx_attest/linux clean
 	$(MAKE) -C qcnl/linux clean
 	$(MAKE) -C qpl/linux clean
 	$(MAKE) -C ../QuoteVerification clean
@@ -190,20 +247,28 @@ clean:
 	./installer/linux/deb/libsgx-dcap-ql/clean.sh
 	./installer/linux/deb/libsgx-dcap-quote-verify/clean.sh
 	./installer/linux/deb/libsgx-ae-qe3/clean.sh
+	./installer/linux/deb/libsgx-ae-tdqe/clean.sh
 	./installer/linux/deb/libsgx-ae-id-enclave/clean.sh
 	./installer/linux/deb/libsgx-ae-qve/clean.sh
 	./installer/linux/deb/libsgx-pce-logic/clean.sh
 	./installer/linux/deb/libsgx-qe3-logic/clean.sh
+	./installer/linux/deb/libsgx-tdx-logic/clean.sh
+	./installer/linux/deb/tdx-qgs/clean.sh
+	./installer/linux/deb/libtdx-attest/clean.sh
 	./installer/linux/deb/libsgx-dcap-default-qpl/clean.sh
 	./installer/linux/deb/sgx-dcap-pccs/clean.sh
 	../tools/PCKRetrievalTool/installer/deb/sgx-pck-id-retrieval-tool/clean.sh
 	./installer/linux/rpm/libsgx-dcap-ql/clean.sh
 	./installer/linux/rpm/libsgx-ae-qe3/clean.sh
+	./installer/linux/rpm/libsgx-ae-tdqe/clean.sh
 	./installer/linux/rpm/libsgx-ae-id-enclave/clean.sh
 	./installer/linux/rpm/libsgx-ae-qve/clean.sh
 	./installer/linux/rpm/libsgx-dcap-quote-verify/clean.sh
 	./installer/linux/rpm/libsgx-pce-logic/clean.sh
 	./installer/linux/rpm/libsgx-qe3-logic/clean.sh
+	./installer/linux/rpm/libsgx-tdx-logic/clean.sh
+	./installer/linux/rpm/tdx-qgs/clean.sh
+	./installer/linux/rpm/libtdx-attest/clean.sh
 	./installer/linux/rpm/libsgx-dcap-default-qpl/clean.sh
 	./installer/linux/rpm/sgx-dcap-pccs/clean.sh
 	../tools/PCKRetrievalTool/installer/rpm/sgx-pck-id-retrieval-tool/clean.sh

QuoteGeneration/README.md

@@ -2,7 +2,7 @@ Intel(R) Software Guard Extensions Data Center Attestation Primitives (Intel(R)
 ================================================
 
 For Windows* OS
------------------ 
+-----------------
 ## Prerequisites
 - Ensure that you have the following required operating systems:
    * Windows* Server 2016 (Long-Term Servicing Channel)
@@ -22,7 +22,7 @@ For Windows* OS
 ## How to build
 - In the top directory, open the Microsoft Visual Studio* solution `SGX_DCAP.sln` and run a build.
 - The Intel(R) SGX DCAP NuGet* package generation depends on a standalone tool `nuget.exe`. To build the Intel(R) SGX DCAP NuGet* package:
-   1.  Download the standalone tool `nuget.exe` from [nuget.org/downloads](https://nuget.org/downloads) and put it to `installer\win\` folder or add the folder where you placed `nuget.exe` to your PATH environment variable. 
+   1.  Download the standalone tool `nuget.exe` from [nuget.org/downloads](https://nuget.org/downloads) and put it to `installer\win\` folder or add the folder where you placed `nuget.exe` to your PATH environment variable.
    2.  Go to `installer\win\` folder and run the following command from the Command Prompt:
 ```
     DCAP_Components.bat
@@ -33,11 +33,11 @@ For Windows* OS
     dcap_copy_file.bat
     dcap_generate.bat <version>
 ```
-  The target INF installers `sgx_dcap.inf` and `sgx_dcap_dev.inf` will be generated in the same folder. 
+  The target INF installers `sgx_dcap.inf` and `sgx_dcap_dev.inf` will be generated in the same folder.
 **NOTE**:`sgx_dcap_dev.inf` is for Windows* Server 2016 LTSC and `sgx_dcap.inf` is for Windows* Server 2019 LTSC.
 
 ## How to install
-   Refer to the *"Installation Instructions"* section in the [Intel(R) Software Guard Extensions: Data Center Attestation Primitives Installation Guide For Windows* OS](https://download.01.org/intel-sgx/sgx-dcap/1.13/windows/docs/Intel_SGX_DCAP_Windows_SW_Installation_Guide.pdf) to install the right packages on your platform.
+   Refer to the *"Installation Instructions"* section in the [Intel(R) Software Guard Extensions: Data Center Attestation Primitives Installation Guide For Windows* OS](https://download.01.org/intel-sgx/sgx-dcap/1.14/windows/docs/Intel_SGX_DCAP_Windows_SW_Installation_Guide.pdf) to install the right packages on your platform.
 
 
 For Linux* OS
@@ -47,8 +47,8 @@ For Linux* OS
   * Ubuntu* 18.04 LTS Desktop 64bits
   * Ubuntu* 18.04 LTS Server 64bits
   * Ubuntu* 20.04 LTS Server 64bits
-  * Red Hat Enterprise Linux Server release 8.2 64bits
-  * CentOS 8.2 64bits
+  * Red Hat Enterprise Linux Server release 8.5 64bits
+  * CentOS Stream 8 64bits
 - Ensure that you have the following required hardware:
   * 8th Generation Intel(R) Core(TM) Processor or newer with **Flexible Launch Control** support*
   * Intel(R) Atom(TM) Processor with **Flexible Launch Control** support*
@@ -60,17 +60,17 @@ For Linux* OS
   ```
   * On Ubuntu 20.04
   ```
-    $ sudo apt-get install build-essential wget python-is-python3 debhelper zip libcurl4-openssl-dev
+    $ sudo apt-get install build-essential wget python-is-python3 debhelper zip libcurl4-openssl-dev pkgconf libboost-dev libboost-system-dev protobuf-c-compiler libprotobuf-c-dev protobuf-compiler
   ```
-  * On Red Hat Enterprise Linux 8.2
+  * On Red Hat Enterprise Linux 8.5
   ```
     $ sudo yum groupinstall 'Development Tools'
-    $ sudo yum install wget python2 rpm-build zip
+    $ sudo yum install wget python2 rpm-build zip pkgconf boost-devel protobuf-lite-devel protobuf-c-compiler protobuf-c-devel
   ```
-  * On CentOS 8.2
+  * On CentOS Stream 8
   ```
     $ sudo dnf group install 'Development Tools'
-    $ sudo dnf --enablerepo=PowerTools install wget python2 rpm-build zip
+    $ sudo dnf --enablerepo=powertools install wget python2 rpm-build zip pkgconf boost-devel protobuf-lite-devel protobuf-c-compiler protobuf-c-devel
   ```
 - Install latest prebuilt Intel(R) SGX SDK Installer from [01.org](https://01.org/intel-software-guard-extensions/downloads)
 ```
@@ -98,7 +98,7 @@ A `README.md` is provided in the Intel(R) SGX driver package for Intel(R) SGX DC
 - To build the Intel(R) SGX DCAP Quote Generation Library and the Intel(R) SGX Default Quote Provider Library, enter the following command:
 ```
    $ make
-``` 
+```
 - To clean the files generated by previous `make` command, enter the following command:
 ```
   $ make clean
@@ -117,12 +117,12 @@ A `README.md` is provided in the Intel(R) SGX driver package for Intel(R) SGX DC
     $ make deb_pkg
   ```
   You can find the generated installers located under `linux/installer/deb/`.
-  **Note**: On Ubuntu 18.04 and Ubuntu 20.04, the above command also generates another debug symbol package with extension name of `.ddeb` for debug purpose.  
+  **Note**: On Ubuntu 18.04 and Ubuntu 20.04, the above command also generates another debug symbol package with extension name of `.ddeb` for debug purpose.
   **Note**: The above command builds the installers with default configuration firstly and then generates the target installers. To build the installers without optimization and with full debug information kept in the libraries, enter the following command:
   ```
   $ make deb_pkg DEBUG=1
   ```
-  * On Red Hat Enterprise Linux 8.2 and CentOS 8.2:
+  * On Red Hat Enterprise Linux 8.5 and CentOS Stream 8:
   ```
     $ make rpm_pkg
   ```
@@ -140,7 +140,7 @@ A `README.md` is provided in the Intel(R) SGX driver package for Intel(R) SGX DC
   ```
   **NOTE**: Sometimes we will split old package into smaller ones or move files between different packages. In such cases, you need to add `--force-overwrite` to overwrite existing files. If you're doing a fresh install, you can omit this option.
 
-  * On Red Hat Enterprise Linux 8.2 and CentOS 8.2:
+  * On Red Hat Enterprise Linux 8.5 and CentOS Stream 8:
   ```
     $ sudo rpm -ivh libsgx-ae-pce*.rpm libsgx-ae-qe3*.rpm libsgx-ae-id-enclave*.rpm libsgx-ae-qve*.rpm libsgx-enclave-common*.rpm libsgx-urts*.rpm
   ```
@@ -151,7 +151,7 @@ A `README.md` is provided in the Intel(R) SGX driver package for Intel(R) SGX DC
   ```
     $ sudo dpkg -i libsgx-dcap-ql_*.deb
   ```
-  * On Red Hat Enterprise Linux 8.2 and CentOS 8.2:
+  * On Red Hat Enterprise Linux 8.5 and CentOS Stream 8:
   ```
     $ sudo rpm -ivh libsgx-dcap-ql*.rpm
   ```
@@ -162,7 +162,7 @@ A `README.md` is provided in the Intel(R) SGX driver package for Intel(R) SGX DC
     $ sudo dpkg -i libsgx-dcap-ql-dev_*.deb
     $ sudo dpkg -i libsgx-dcap-ql-dbgsym_*.deb
   ```
-  * On Red Hat Enterprise Linux 8.2 and CentOS 8.2:
+  * On Red Hat Enterprise Linux 8.5 and CentOS Stream 8:
   ```
     $ sudo rpm -ivh libsgx-dcap-ql-devel*.rpm
     $ sudo rpm -ivh libsgx-dcap-ql-debuginfo*.rpm
@@ -175,7 +175,7 @@ A `README.md` is provided in the Intel(R) SGX driver package for Intel(R) SGX DC
     $ sudo dpkg -i libsgx-dcap-default-qpl_*.deb
     $ sudo dpkg -i sgx-dcap-pccs_*.deb
   ```
-  * On Red Hat Enterprise Linux 8.2 and CentOS 8.2:
+  * On Red Hat Enterprise Linux 8.5 and CentOS Stream 8:
   ```
     $ sudo rpm -ivh libsgx-dcap-default-qpl*.rpm
     $ sudo rpm -ivh sgx-dcap-pccs*.rpm
@@ -187,8 +187,10 @@ A `README.md` is provided in the Intel(R) SGX driver package for Intel(R) SGX DC
     $ sudo dpkg -i libsgx-dcap-default-qpl-dev*.deb libsgx-headers*.deb
     $ sudo dpkg -i libsgx-dcap-default-qpl-dbgsym*.deb
   ```
-  * On Red Hat Enterprise Linux 8.2 and CentOS 8.2:
+  * On Red Hat Enterprise Linux 8.5 and CentOS Stream 8:
   ```
     $ sudo rpm -ivh libsgx-dcap-default-qpl-devel*.rpm libsgx-headers*.rpm
     $ sudo rpm -ivh libsgx-dcap-default-qpl-debuginfo*.rpm
   ```
+## TDX Attestation Support
+- From version 1.14, TDX attestation feature is added into DCAP. Corresponding packages will be built along with the DCAP Quote Generation Library adn DCAP Quote Verification Library. Currently, TDX attestation support has been verified on Red Hat Enterprise Linux 8.5 and CentOS Stream 8 only.

QuoteGeneration/common/inc/internal/se_trace.h

@@ -119,7 +119,7 @@ void  __attribute__((weak)) sgx_proc_log_report(int level, const char* format, .
 #else
 #define SE_PROD_LOG(fmt, ...)                                                                                       \
     do {                                                                                                            \
-        if(sgx_proc_log_report) {                                                                                   \
+        if(sgx_proc_log_report != NULL) {                                                                                   \
             sgx_proc_log_report(1, "[%s %s:%d] " fmt, __FUNCTION__, __FILE__, __LINE__, ##__VA_ARGS__);             \
         } else {                                                                                                    \
             se_trace_internal(SE_TRACE_ERROR, "[%s %s:%d] " fmt, __FUNCTION__, __FILE__, __LINE__, ##__VA_ARGS__);  \

QuoteGeneration/common/inc/internal/se_version.h

@@ -28,18 +28,21 @@
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  *
  */
-#define STRFILEVER    "1.13.100.4"
+#define STRFILEVER    "1.14.100.3"
 #define COPYRIGHT      "Copyright (C) 2022 Intel Corporation"
-#define FILEVER        1,13,100,4
-#define PRODUCTVER     1,13,100,4
-#define STRPRODUCTVER  "1.13.100.4"
+#define FILEVER        1,14,100,3
+#define PRODUCTVER     1,14,100,3
+#define STRPRODUCTVER  "1.14.100.3"
 #define COMPANYNAME    "Intel Corporation"
 #define PRODUCTNAME    "Intel® Software Guard Extensions"
 
-#define DEFAULT_QPL_VERSION          "1.12.102.0"
-#define QUOTE_VERIFIER_VERSION       "1.11.102.0"
-#define QUOTE_LOADER_VERSION         "1.11.102.1"
+#define DEFAULT_QPL_VERSION          "1.13.100.3"
+#define QUOTE_VERIFIER_VERSION       "1.12.100.3"
+#define QUOTE_LOADER_VERSION         "1.11.103.3"
+#define TDQE_WRAPPER_VERSION         "1.14.100.3"
+#define PCE_WRAPPER_VERSION          "1.14.100.3"
 
-#define QE3_VERSION                  "1.11.101.1"
-#define QVE_VERSION                  "1.11.101.1"
-#define IDE_VERSION                  "1.11.101.1"
+#define QE3_VERSION                  "1.14.100.2"
+#define QVE_VERSION                  "1.14.100.2"
+#define IDE_VERSION                  "1.14.100.2"
+#define TDQE_VERSION                 "1.14.100.2"

QuoteGeneration/download_prebuilt.bat

@@ -1,4 +1,4 @@
-@REM  Copyright (C) 2011-2021 Intel Corporation. All rights reserved.
+@REM  Copyright (C) 2011-2022 Intel Corporation. All rights reserved.
 @REM 
 @REM  Redistribution and use in source and binary forms, with or without
 @REM  modification, are permitted provided that the following conditions
@@ -29,9 +29,9 @@
 
 @echo off
 
-set ae_file_name=prebuilt_windows_dcap_1.13.zip
-set checksum_file=SHA256SUM_prebuilt_windows_dcap_1.13.cfg
-set server_url_path=https://download.01.org//intel-sgx/sgx-dcap/1.13/windows/
+set ae_file_name=prebuilt_windows_dcap_1.14.zip
+set checksum_file=SHA256SUM_prebuilt_windows_dcap_1.14.cfg
+set server_url_path=https://download.01.org/intel-sgx/sgx-dcap/1.14/windows/
 set server_ae_url=%server_url_path%/%ae_file_name%
 set server_checksum_url=%server_url_path%/%checksum_file%
 

QuoteGeneration/download_prebuilt.sh

@@ -32,9 +32,9 @@
 
 top_dir=`dirname $0`
 out_dir=$top_dir
-ae_file_name=prebuilt_dcap_1.13.tar.gz
-checksum_file=SHA256SUM_prebuilt_dcap_1.13.cfg
-server_url_path=https://download.01.org/intel-sgx/sgx-dcap/1.13/linux
+ae_file_name=prebuilt_dcap_1.14.tar.gz
+checksum_file=SHA256SUM_prebuilt_dcap_1.14.cfg
+server_url_path=https://download.01.org/intel-sgx/sgx-dcap/1.14/linux
 server_ae_url=$server_url_path/$ae_file_name
 server_checksum_url=$server_url_path/$checksum_file
 

QuoteGeneration/installer/linux/common/libsgx-ae-tdqe/BOMs/libsgx-ae-tdqe-package.txt

@@ -0,0 +1,3 @@
+DeliveryName	InstallName	FileCheckSum	FileFeature	FileOwner
+<deliverydir>/installer/linux/common/libsgx-ae-tdqe/installConfig	<installdir>/installConfig	0	main	STP
+<deliverydir>/installer/linux/common/libsgx-ae-tdqe/Makefile	<installdir>/Makefile	0	main	STP

QuoteGeneration/installer/linux/common/libsgx-ae-tdqe/BOMs/libsgx-ae-tdqe.txt

@@ -0,0 +1,2 @@
+DeliveryName	InstallName	FileCheckSum	FileFeature	FileOwner
+<deliverydir>/psw/ae/data/prebuilt/libsgx_tdqe.signed.so	<installdir>/lib/libsgx_tdqe.signed.so	0	main	STP