Chia-Che Tsai 6c4f21cba2 [Pal/Linux-SGX] Simple remote attestation framework ...

This is the minimalistic implementation of the remote attestation
framework. The framework conducts the following steps during
start-up to verify the authenticity of the SGX platform:

1. Connect to aesmd service to retrieve platform info (targetinfo)
   of the Quoting Enclave (QE) before enclave creation.
2. Prepare the SGX report inside enclave (during initialization):
   - Read SPID (service provider ID) from sgx.ra_client_spid in
     manifest.
   - Get an SGX report for local attestation to QE.
   - Generate a random 16-byte nonce for freshness.
   - Perform an OCALL for retrieving the quote.
3. Gather attestation data (QE report, QE quote, IAS report, signature,
   certificate chain) outside of enclave:
   - Connect to aesmd to retrieve the QE quote; aesmd also returns
     QE report.
   - Connect to Intel Attestation Service using curl. A client
     subscription key (specified via sgx.ra_client_key in manifest)
     is required to authenticate the HTTPS connection.
   - Get the IAS report, signature, and certificate chain from IAS.
     Print out the attestation result.
   - Return all this attestation data back to the enclave.

2019-09-10 21:00:49 -07:00

..

adapters

[Pal/Linux-SGX] Simple remote attestation framework

2019-09-10 21:00:49 -07:00

mbedtls

[Pal/Linux-SGX] Simple remote attestation framework

2019-09-10 21:00:49 -07:00

udivmodti4.c

Swap out the wolfssl SHA256 implementation with mbedtls. This also introduces a wrapper layer for pal crypto functions, which should make experimenting with different libraries easier.

2017-07-31 20:54:40 -04:00