Adding

secure_enclave/EnclaveCommon.h

@@ -67,6 +67,8 @@ extern domain_parameters curve;
 #define SAFE_FREE(__X__) if (__X__) {free(__X__); __X__ = NULL;}
 #define SAFE_DELETE(__X__) if (__X__) {delete(__X__); __X__ = NULL;}
 #define SAFE_CHAR_BUF(__X__, __Y__)  ;char __X__ [ __Y__ ]; memset(__X__, 0, __Y__);
+#define RANDOM_CHAR_BUF(__X__, __Y__)  ;char __X__ [ __Y__ ]; get_global_random( \
+(unsigned char*) __X__, __Y__);
 
 #define CHECK_ARG_CLEAN(_EXPRESSION_) \
     if (!(_EXPRESSION_)) {        \

secure_enclave/secure_enclave.c

@@ -197,8 +197,7 @@ void trustedGenerateSEK(int *errStatus, char *errString,
     CHECK_STATE(encrypted_SEK);
     CHECK_STATE(SEK_hex);
 
-
-    SAFE_CHAR_BUF(SEK_raw, SGX_AESGCM_KEY_SIZE);;
+    RANDOM_CHAR_BUF(SEK_raw, SGX_AESGCM_KEY_SIZE);
 
     uint32_t hex_aes_key_length = SGX_AESGCM_KEY_SIZE * 2;
     carray2Hex((uint8_t*) SEK_raw, SGX_AESGCM_KEY_SIZE, SEK_hex);