apache / apache/teaclave-sgx-sdk

is chrono considerd trusted time?

Open
#47 10 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
1.2k
Forks
268
PR merge metrics
No merged PRs in 30d

Description

Hi, I am trying to understand if the porting to SGX of the [chrono](https://github.com/baidu/rust-sgx-sdk/tree/master/third_party/chrono) crate is considered safe or it's based on ocalls and anyone can modify the time?

Thanks

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reviewing the linked third_party/chrono port and its time-related implementation, then trace whether time retrieval uses OCALLs. Compare that behavior with SGX's trusted and untrusted boundaries; done means documenting whether chrono time can be modified by an untrusted host and the security implications.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
security
Issue type
Documentation
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.