-
Notifications
You must be signed in to change notification settings - Fork 115
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
go/runtime/host/sgx: Add basic flow for ECDSA attestation
- Loading branch information
Showing
3 changed files
with
214 additions
and
81 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,57 @@ | ||
| package sgx | ||
|
|
||
| import ( | ||
| "context" | ||
| "fmt" | ||
|
|
||
| "github.com/oasisprotocol/oasis-core/go/common" | ||
| "github.com/oasisprotocol/oasis-core/go/common/sgx/aesm" | ||
| "github.com/oasisprotocol/oasis-core/go/runtime/host/protocol" | ||
| ) | ||
|
|
||
| type teeStateECDSA struct { | ||
| key *aesm.AttestationKeyID | ||
| } | ||
|
|
||
| func (ec *teeStateECDSA) Init(ctx context.Context, sp *sgxProvisioner, runtimeID common.Namespace) ([]byte, error) { | ||
| akeys, err := sp.aesm.GetAttestationKeyIDs(ctx) | ||
| if err != nil { | ||
| return nil, fmt.Errorf("unable to fetch attestation key IDs: %w", err) | ||
| } | ||
|
|
||
| // Find the first suitable ECDSA-capable key. | ||
| var key *aesm.AttestationKeyID | ||
| for _, akey := range akeys { | ||
| if akey.Type == aesm.AttestationKeyECDSA_P256 { | ||
| key = akey | ||
| break | ||
| } | ||
| } | ||
| if key == nil { | ||
| return nil, fmt.Errorf("no suitable ECDSA attestation keys found") | ||
| } | ||
|
|
||
| // Retrieve the target info for QE. | ||
| targetInfo, err := sp.aesm.GetTargetInfo(ctx, key) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| ec.key = key | ||
|
|
||
| return targetInfo, nil | ||
| } | ||
|
|
||
| func (ec *teeStateECDSA) Update(ctx context.Context, sp *sgxProvisioner, conn protocol.Connection, report []byte, nonce string) ([]byte, error) { | ||
| quote, err := sp.aesm.GetQuoteEx(ctx, ec.key, report) | ||
| if err != nil { | ||
| return nil, fmt.Errorf("failed to get quote: %w", err) | ||
| } | ||
|
|
||
| // TODO: Retrieve corresponding PCK certificate. | ||
| // TODO: Retrieve corresponding TCB info. | ||
| // TODO: Retrieve corresponding QE identity. | ||
| // TODO: Call the runtime to configure an ECDSA attestation. | ||
|
|
||
| return nil, fmt.Errorf("ECDSA attestation not yet implemented (quote: %X)", quote) | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,110 @@ | ||
| package sgx | ||
|
|
||
| import ( | ||
| "context" | ||
| "encoding/binary" | ||
| "fmt" | ||
|
|
||
| "github.com/oasisprotocol/oasis-core/go/common" | ||
| "github.com/oasisprotocol/oasis-core/go/common/cbor" | ||
| cmnIAS "github.com/oasisprotocol/oasis-core/go/common/sgx/ias" | ||
| ias "github.com/oasisprotocol/oasis-core/go/ias/api" | ||
| "github.com/oasisprotocol/oasis-core/go/runtime/host/protocol" | ||
| ) | ||
|
|
||
| type teeStateEPID struct { | ||
| runtimeID common.Namespace | ||
| epidGID uint32 | ||
| spid cmnIAS.SPID | ||
| quoteType *cmnIAS.SignatureType | ||
| } | ||
|
|
||
| func (ep *teeStateEPID) Init(ctx context.Context, sp *sgxProvisioner, runtimeID common.Namespace) ([]byte, error) { | ||
| qi, err := sp.aesm.InitQuote(ctx) | ||
| if err != nil { | ||
| return nil, fmt.Errorf("error while getting quote info from AESMD: %w", err) | ||
| } | ||
|
|
||
| spidInfo, err := sp.ias.GetSPIDInfo(ctx) | ||
| if err != nil { | ||
| return nil, fmt.Errorf("error while getting IAS SPID information: %w", err) | ||
| } | ||
|
|
||
| ep.runtimeID = runtimeID | ||
| ep.epidGID = binary.LittleEndian.Uint32(qi.GID[:]) | ||
| ep.spid = spidInfo.SPID | ||
| ep.quoteType = &spidInfo.QuoteSignatureType | ||
|
|
||
| return qi.TargetInfo, nil | ||
| } | ||
|
|
||
| func (ep *teeStateEPID) Update(ctx context.Context, sp *sgxProvisioner, conn protocol.Connection, report []byte, nonce string) ([]byte, error) { | ||
| // Update the SigRL (Not cached, knowing if revoked is important). | ||
| sigRL, err := sp.ias.GetSigRL(ctx, ep.epidGID) | ||
| if err != nil { | ||
| return nil, fmt.Errorf("error while requesting SigRL: %w", err) | ||
| } | ||
| sigRL = cbor.FixSliceForSerde(sigRL) | ||
|
|
||
| quote, err := sp.aesm.GetQuote( | ||
| ctx, | ||
| report, | ||
| *ep.quoteType, | ||
| ep.spid, | ||
| make([]byte, 16), | ||
| sigRL, | ||
| ) | ||
| if err != nil { | ||
| return nil, fmt.Errorf("error while getting quote: %w", err) | ||
| } | ||
|
|
||
| evidence := ias.Evidence{ | ||
| RuntimeID: ep.runtimeID, | ||
| Quote: quote, | ||
| Nonce: nonce, | ||
| } | ||
|
|
||
| avrBundle, err := sp.ias.VerifyEvidence(ctx, &evidence) | ||
| if err != nil { | ||
| return nil, fmt.Errorf("error while verifying attestation evidence: %w", err) | ||
| } | ||
|
|
||
| avrBundle.Body = cbor.FixSliceForSerde(avrBundle.Body) | ||
| avrBundle.CertificateChain = cbor.FixSliceForSerde(avrBundle.CertificateChain) | ||
| avrBundle.Signature = cbor.FixSliceForSerde(avrBundle.Signature) | ||
|
|
||
| _, err = conn.Call( | ||
| ctx, | ||
| &protocol.Body{ | ||
| RuntimeCapabilityTEERakAvrRequest: &protocol.RuntimeCapabilityTEERakAvrRequest{ | ||
| AVR: *avrBundle, | ||
| }, | ||
| }, | ||
| ) | ||
| if err != nil { | ||
| // If we are here, presumably the AVR is well-formed (VerifyEvidence | ||
| // succeeded). Since this is more than likely the AVR indicating | ||
| // rejection, deserialize it and log some pertinent details. | ||
| avr, decErr := cmnIAS.UnsafeDecodeAVR(avrBundle.Body) | ||
| if decErr == nil { | ||
| switch avr.ISVEnclaveQuoteStatus { | ||
| case cmnIAS.QuoteOK, cmnIAS.QuoteSwHardeningNeeded: | ||
| // That's odd, the quote checks out as ok. Can't | ||
| // really get further information. | ||
| default: | ||
| // This probably has to do with the never-ending series of | ||
| // speculative execution trashfires, so log the vulns and | ||
| // quote status. | ||
| sp.logger.Error("attestation likely rejected by IAS", | ||
| "quote_status", avr.ISVEnclaveQuoteStatus.String(), | ||
| "advisory_ids", avr.AdvisoryIDs, | ||
| ) | ||
| } | ||
| } | ||
|
|
||
| return nil, fmt.Errorf("error while configuring AVR: %w", err) | ||
| } | ||
| attestation := cbor.Marshal(avrBundle) | ||
|
|
||
| return attestation, nil | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters