apache / apache/teaclave-sgx-sdk

Samplecode for FLC DCAP remote attestation in production mode

Open
#135 5 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
1.2k
Forks
268
PR merge metrics
No merged PRs in 30d

Description

Dear @dingelish

So far we've only done RA in debug mode, which is pointless for a real application. After talking to Intel we've learned that RA is possible in production mode without obtaining any special license with Intel. The pointers they gave us were:

https://github.com/intel/SGXDataCenterAttestationPrimitives
https://download.01.org/intel-sgx/dcap-1.0.1/docs/Intel_SGX_DCAP_ECDSA_Orientation.pdf
https://01.org/intel-softwareguard-extensions/downloads/intel-sgx-dcap-linux-1.0.1-release
https://software.intel.com/sites/default/files/managed/f1/b8/intel-sgx-support-for-third-party-attestation.pdf
https://api.portal.trustedservices.intel.com/ (See the section titled “Attestation Services Utilizing ECDSA”)

Now the question for this rust SDK: Do you already have some samplecode to perform RA in production mode with this new procedure?

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reviewing the existing Rust SDK attestation entry points, then compare them with the linked Intel SGX DCAP repository, orientation guide, release documentation, and attestation-services portal. Determine whether production-mode ECDSA remote attestation is already supported and what sample scope would be required; done means a reviewed production-mode sample or a documented finding that one already exists.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.