ego icon indicating copy to clipboard operation
ego copied to clipboard

extract optional and required SGX claims provided by Open Enclave

Open THS-on opened this issue 1 year ago • 5 comments

This change implements the extraction of all the optional and required SGX claims provided by Open Enclave. The main motivation was to get the UEID which matches the QEID, so that it is possible to tie the quote and machine where the enclave is running on together. The additional information gives more flexibility to attest the system.

Changes around the Report struct:

  • Added UEID field which is QEID for SGX
  • Added SGXClaims field which holds the optional and required claims
  • Added conversion functions between internal and attestation structs. What is the reason behind the duplication of those structs?

Two new structs SGXOptional and SGXRequired are introduced to hold the respective claims.

THS-on avatar Nov 17 '23 11:11 THS-on

Deploy Preview for ego-docs ready!

Name Link
Latest commit 09943dea1a8ac94a5d1e635b242cc31367257569
Latest deploy log https://app.netlify.com/sites/ego-docs/deploys/65574e94ce35180008e686e9
Deploy Preview https://deploy-preview-233--ego-docs.netlify.app
Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

netlify[bot] avatar Nov 17 '23 11:11 netlify[bot]

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

CLAassistant avatar Nov 17 '23 11:11 CLAassistant

Thank you for wanting to contribute to EGo! The feature makes sense and we would like to accept it. I haven't reviewed the implementation in detail yet. You need to sign the CLA (see above) so that we can accept your contribution.

thomasten avatar Nov 17 '23 16:11 thomasten

I need to check, if I can sign the CLA. This might take longer time. Is it possible to contribute changes without the CLA?

THS-on avatar Nov 17 '23 18:11 THS-on

No, unfortunately not.

thomasten avatar Nov 18 '23 08:11 thomasten