oak
oak copied to clipboard
Add basic Key Provisioning implementation
This PR adds basic implementation of Key Provisioning for Oak Containers which consists of 2 services:
-
KeyProvisioningDependantService
which starts before other services and expects to get the group encryption key from the Hostlib -
KeyProvisioningService
which starts in parallel with other Orchestrator services and can share the group encryption key with other enclaves- Sharing keys with other enclaves is not implemented yet
- This service will be removed once we implement a full KPS
Ref https://github.com/project-oak/oak/issues/4442
Replaced by https://github.com/project-oak/oak/pull/4722
Replaced by:
- https://github.com/project-oak/oak/pull/4543
- https://github.com/project-oak/oak/pull/4722
- https://github.com/project-oak/oak/pull/4814
- https://github.com/project-oak/oak/pull/4961