sgx_unseal_data() get 0x3001 error

[HuangMinming]

hi everyone,
I call sgx_unseal_data() in sgx environment, sometimes got 0x3001 error which means SGX_ERROR_MAC_MISMATCH： Report verification error.
I found it may happen after the app was recompile and link.
Is it a issue?
I think the app was modified is a normal action. If the app can't unseal data after recompiling and linking, the sealed data become unreadable, and the app can't recover data which was sealed.

[andyzyb]

It depends on how the seal data is generated. If you seal the data attached to the Enclave hash, then recompiling will impact it. If you seal the data attached to the Enclave signer, it should work.

[HuangMinming]

It depends on how the seal data is generated. If you seal the data attached to the Enclave hash, then recompiling will impact it. If you seal the data attached to the Enclave signer, it should work.

Hi, andyzyb. Thanks for you reply. I refered the demo "SealUnseal" to call sgx_seal_data() to seal data , which parameter can determine the mode? I also add a additional_MACtext.