[Assignment-7] working implementation of untrusted
This commit is contained in:
parent
e3daea6279
commit
355e8560f6
8 changed files with 1126 additions and 208 deletions
|
|
@ -1,13 +1,17 @@
|
|||
#include <errno.h>
|
||||
#include <stdio.h>
|
||||
#include <stdlib.h>
|
||||
|
||||
#include "util.h"
|
||||
#include "proxy.h"
|
||||
#include "proxysetup.h"
|
||||
#include "intermediary.h"
|
||||
|
||||
|
||||
static char* BIN_NAME = "SignatureProxy";
|
||||
|
||||
static sgx_enclave_id_t global_eid = 0;
|
||||
|
||||
void syntax_exit(void) {
|
||||
char* syntax =
|
||||
"SignatureProxy Version 0.0.0\n"
|
||||
|
|
@ -16,12 +20,166 @@ void syntax_exit(void) {
|
|||
"Commands:\n"
|
||||
"%s"
|
||||
"\n"
|
||||
"%s"
|
||||
"\n"
|
||||
"%s";
|
||||
|
||||
printf(syntax, BIN_NAME, intermediary_syntax(), proxy_syntax());
|
||||
printf(syntax, BIN_NAME, intermediary_syntax(), proxy_syntax(), proxysetup_syntax());
|
||||
exit(1);
|
||||
}
|
||||
|
||||
void set_bin_name(char* bin_name) {
|
||||
BIN_NAME = bin_name;
|
||||
}
|
||||
|
||||
typedef struct _sgx_errlist_t {
|
||||
sgx_status_t err;
|
||||
const char *msg;
|
||||
const char *sug; /* Suggestion */
|
||||
} sgx_errlist_t;
|
||||
|
||||
/* Error code returned by sgx_create_enclave */
|
||||
static sgx_errlist_t sgx_errlist[] = {
|
||||
{
|
||||
SGX_ERROR_UNEXPECTED,
|
||||
"Unexpected error occurred.",
|
||||
NULL
|
||||
},
|
||||
{
|
||||
SGX_ERROR_INVALID_PARAMETER,
|
||||
"Invalid parameter.",
|
||||
NULL
|
||||
},
|
||||
{
|
||||
SGX_ERROR_OUT_OF_MEMORY,
|
||||
"Out of memory.",
|
||||
NULL
|
||||
},
|
||||
{
|
||||
SGX_ERROR_ENCLAVE_LOST,
|
||||
"Power transition occurred.",
|
||||
"Please refer to the sample \"PowerTransition\" for details."
|
||||
},
|
||||
{
|
||||
SGX_ERROR_INVALID_ENCLAVE,
|
||||
"Invalid enclave image.",
|
||||
NULL
|
||||
},
|
||||
{
|
||||
SGX_ERROR_INVALID_ENCLAVE_ID,
|
||||
"Invalid enclave identification.",
|
||||
NULL
|
||||
},
|
||||
{
|
||||
SGX_ERROR_INVALID_SIGNATURE,
|
||||
"Invalid enclave signature.",
|
||||
NULL
|
||||
},
|
||||
{
|
||||
SGX_ERROR_OUT_OF_EPC,
|
||||
"Out of EPC memory.",
|
||||
NULL
|
||||
},
|
||||
{
|
||||
SGX_ERROR_NO_DEVICE,
|
||||
"Invalid SGX device.",
|
||||
"Please make sure SGX module is enabled in the BIOS, and install SGX driver afterwards."
|
||||
},
|
||||
{
|
||||
SGX_ERROR_MEMORY_MAP_CONFLICT,
|
||||
"Memory map conflicted.",
|
||||
NULL
|
||||
},
|
||||
{
|
||||
SGX_ERROR_INVALID_METADATA,
|
||||
"Invalid enclave metadata.",
|
||||
NULL
|
||||
},
|
||||
{
|
||||
SGX_ERROR_DEVICE_BUSY,
|
||||
"SGX device was busy.",
|
||||
NULL
|
||||
},
|
||||
{
|
||||
SGX_ERROR_INVALID_VERSION,
|
||||
"Enclave version was invalid.",
|
||||
NULL
|
||||
},
|
||||
{
|
||||
SGX_ERROR_INVALID_ATTRIBUTE,
|
||||
"Enclave was not authorized.",
|
||||
NULL
|
||||
},
|
||||
{
|
||||
SGX_ERROR_ENCLAVE_FILE_ACCESS,
|
||||
"Can't open enclave file.",
|
||||
NULL
|
||||
},
|
||||
};
|
||||
|
||||
/* Check error conditions for loading enclave */
|
||||
void print_error_message(sgx_status_t ret)
|
||||
{
|
||||
size_t idx = 0;
|
||||
size_t ttl = sizeof sgx_errlist/sizeof sgx_errlist[0];
|
||||
|
||||
for (idx = 0; idx < ttl; idx++) {
|
||||
if(ret == sgx_errlist[idx].err) {
|
||||
if(NULL != sgx_errlist[idx].sug)
|
||||
printf("Info: %s\n", sgx_errlist[idx].sug);
|
||||
printf("Error: %s\n", sgx_errlist[idx].msg);
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
if (idx == ttl)
|
||||
printf("Error code is 0x%X. Please refer to the \"Intel SGX SDK Developer Reference\" for more details.\n", ret);
|
||||
}
|
||||
|
||||
int initialize_enclave(char* token_path) {
|
||||
FILE* sgx_token_file = NULL;
|
||||
sgx_launch_token_t token = {0};
|
||||
sgx_status_t ret;
|
||||
int updated = 0;
|
||||
|
||||
if (token_path != NULL) {
|
||||
sgx_token_file = fopen(token_path, "rb");
|
||||
}
|
||||
|
||||
if(sgx_token_file == NULL){
|
||||
if (errno != ENOENT && token_path != NULL) {
|
||||
perror("Error opening sgx token file");
|
||||
exit(1);
|
||||
}
|
||||
}else{
|
||||
size_t read_num = fread(token, 1, sizeof(sgx_launch_token_t), sgx_token_file);
|
||||
if (read_num != 0 && read_num != sizeof(sgx_launch_token_t)) {
|
||||
fprintf(stderr, "sgx token file is corrupted");
|
||||
return (1);
|
||||
}
|
||||
}
|
||||
|
||||
ret = sgx_create_enclave("enclave.signed.so", SGX_DEBUG_FLAG, &token, &updated, &global_eid, NULL);
|
||||
if (ret != SGX_SUCCESS) {
|
||||
print_error_message(ret);
|
||||
return (1);
|
||||
}
|
||||
|
||||
if (updated && token_path != NULL) {
|
||||
sgx_token_file = freopen(token_path, "wb", sgx_token_file);
|
||||
if(sgx_token_file == NULL){
|
||||
perror("Error opening sgx token file");
|
||||
return (1);
|
||||
}
|
||||
size_t write_num = fwrite(token, 1, sizeof(sgx_launch_token_t), sgx_token_file);
|
||||
if (write_num != sizeof(sgx_launch_token_t)){
|
||||
fprintf(stderr,"Warning: Failed to save launch token to \"%s\".\n", token_path);
|
||||
return (1);
|
||||
}
|
||||
}
|
||||
return (0);
|
||||
}
|
||||
|
||||
sgx_enclave_id_t get_global_eid(void){
|
||||
return global_eid;
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue