veracruz icon indicating copy to clipboard operation
veracruz copied to clipboard

Remove the hack where we pass keys through PSA Crypto to get the public key out

Open dreemkiller opened this issue 4 years ago • 1 comments

Requested feature In several places in the code, we load the asymmetric key pair into PSA Crypto and then immediately extract the public key from PSA Crypto. This is done because none of the other crypto libraries support extracting the public component from the keypair. We should find a better way to do this.

Motivation This is super hacky, and it embarrasses me that I wrote it, but... someone else should fix it.

Additional context You can find one example of this in nitro-root-enclave/src/main.rs, near let_device_public_key = There are other places this is done as well (jalisco and sonora also do this, I think)

dreemkiller avatar Jan 20 '21 21:01 dreemkiller

Is this issue still valid? Could the pointer to the example be updated?

(According to #26, jalisco is now sgx-root-enclave, and sonora is now trustzone-root-enclave, but I don't know where nitro-root-enclave is.)

egrimley-arm avatar Sep 09 '21 10:09 egrimley-arm