apache / apache/teaclave-sgx-sdk
is chrono considerd trusted time?
Open
- Dominant language
- Rust
- Stars
- 1.2k
- Forks
- 268
- PR merge metrics
- No merged PRs in 30d
Description
Hi, I am trying to understand if the porting to SGX of the [chrono](https://github.com/baidu/rust-sgx-sdk/tree/master/third_party/chrono) crate is considered safe or it's based on ocalls and anyone can modify the time?
Thanks
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reviewing the linked third_party/chrono port and its time-related implementation, then trace whether time retrieval uses OCALLs. Compare that behavior with SGX's trusted and untrusted boundaries; done means documenting whether chrono time can be modified by an untrusted host and the security implications.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- security
- Issue type
- Documentation
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100