keylime / keylime/enhancements

Adding support for IDevID and IAK

Open
#81 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
3
Forks
22
PR merge metrics
No merged PRs in 30d

Description

# Enhancement Description
- One-line enhancement description (can be used as a release note): Leverage the IDevID and IAK keys/certificates to register each device at the registrar service and enable attestation based on the IAK instead of using an ephemeral AK (Attestation key).
- Keylime Enhancement Proposal: https://github.com/keylime/enhancements/pull/82
- Primary contact (assignee): @gustavobbrand
- Enhancement target (which target equals to which milestone):
- Alpha release target (TBD)
- Beta release target (TBD)
- Stable release target (TBD)

_Please to keep this description up to date._

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reading the linked Keylime Enhancement Proposal #82 and the issue's description of IDevID and IAK registration at the registrar service. Identify the relevant implementation entry points and tests from there; the work is complete when devices can register with those credentials and attestation uses the IAK rather than an ephemeral AK.

Written by the indexing model from the issue text.

Assessment

Domain
security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.