Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improve Use of MRSIGNER Value to Authenticate for Attestation #132

Open
bit-bender opened this issue Oct 5, 2023 · 0 comments
Open

Improve Use of MRSIGNER Value to Authenticate for Attestation #132

bit-bender opened this issue Oct 5, 2023 · 0 comments

Comments

@bit-bender
Copy link
Contributor

Revise the check of the peer enclave's MRSIGNER value for authentication on the attestation interface.

Currently, the implementation checks that both enclaves were signed with the same key.

A more flexible approach would be to instead compare the peer's MRSIGNER value to a known trusted cert file.

In order to do this, we would need to update the CLI to specify the cert file, figure out how to convert it to an MRSIGNER value, and then get the computed MRSIGNER value into the enclave to do the comparison.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant