oak

oak copied to clipboard

Currently all of our no_std crates run their tests with std, by declaring no_std only when not running tests `#![cfg_attr(not(test), no_std)]`. That works fine for many cases, but some tests...

jul-sh

At the moment we don't check the the VCEK certificate is still valid when we check its signature and validate the attestation report.

conradgrobler

Associated data API for encryption is not very ergonomic

2

https://github.com/project-oak/oak/blob/e9be418ca9b6ae820b4cfc5fb5ba9a19a0ec736d/oak_crypto/src/encryptor.rs#L196-L202 Currently, additional authenticated data is passed in by the caller when encrypting, then stored alongside the encrypted message, and then returned to the caller when decrypting. This is not...

tiziano88

Confirm ent tag logic is still needed

2

@thmsbinder I don't remember if this logic is currently used, or was it replaced by the kokoro workflow? If unused, I'd like to remove it and simplify things a bit...

tiziano88

Bumps [rustix](https://github.com/bytecodealliance/rustix) from 0.37.22 to 0.37.27. Commits b38dc51 chore: Release rustix version 0.37.27 a2d9c8e Fix p{read,write}v{,v2}'s encoding of the offset argument on Linux. (#896) (#... dce2777 chore: Release rustix version...

dependabot[bot]

Centralize protos under project-oak/oak/proto

10

Currently, most protocol buffer definitions are stored in folders along with Rust crate folders. However, they are not subordinate to Rust; they are equally used by all languages (notably C++...

thmsbinder

At the moment only some of the Oak Containers tests are executed as part of the `build_binaries_oak_containers` CI step. The Oak Functions on Oak Containers tests are running in the...

conradgrobler

jblebrun

Consolidate oak containers protos into one ergonomic file for customer teams, and add relevant build targets

7

All interfaces exposed to the application are now in `proto/containers/application_interfaces.proto`. Previously they were split across multiple different proto files. Adds cpp and python build targets for them, so customer teams...

jul-sh

Add basic Key Provisioning implementation

1

This PR adds basic implementation of Key Provisioning for Oak Containers which consists of 2 services: - `KeyProvisioningDependantService` which starts before other services and expects to get the group encryption...

ipetr0v