apache / apache/teaclave-sgx-sdk
Samplecode for FLC DCAP remote attestation in production mode
- Dominant language
- Rust
- Stars
- 1.2k
- Forks
- 268
- PR merge metrics
- No merged PRs in 30d
Description
Dear @dingelish
So far we've only done RA in debug mode, which is pointless for a real application. After talking to Intel we've learned that RA is possible in production mode without obtaining any special license with Intel. The pointers they gave us were:
https://github.com/intel/SGXDataCenterAttestationPrimitives
https://download.01.org/intel-sgx/dcap-1.0.1/docs/Intel_SGX_DCAP_ECDSA_Orientation.pdf
https://01.org/intel-softwareguard-extensions/downloads/intel-sgx-dcap-linux-1.0.1-release
https://software.intel.com/sites/default/files/managed/f1/b8/intel-sgx-support-for-third-party-attestation.pdf
https://api.portal.trustedservices.intel.com/ (See the section titled “Attestation Services Utilizing ECDSA”)
Now the question for this rust SDK: Do you already have some samplecode to perform RA in production mode with this new procedure?
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reviewing the existing Rust SDK attestation entry points, then compare them with the linked Intel SGX DCAP repository, orientation guide, release documentation, and attestation-services portal. Determine whether production-mode ECDSA remote attestation is already supported and what sample scope would be required; done means a reviewed production-mode sample or a documented finding that one already exists.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100