RubNoobs/Systemsicherheit
RubNoobs/Systemsicherheit
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

[Assignment-7] add prototype 'sgx_status_t public_key'

Browse source
This commit is contained in:
Sascha Tommasone 2024-07-01 13:07:32 +02:00 • committed by saschato
parent 07254a8036
commit 7ef4e42ef9
3 changed files with 40 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

41
Assignment 7 - SGX Hands-on/src/enclave/enclave.c
View file

@ -3,11 +3,44 @@
#include <sgx_error.h>
#include <sgx_tcrypto.h>
const unsigned char *secretkey_file = "/var/signrelay/sk";
const unsigned char *publickey_file = "/var/signrelay/pk";
sgx_status_t public_key(const uint8_t *sealed, const size_t sealed_size, uint8_t *gx, uint8_t *gy) {
// return if no sealed data provided
if(sealed == NULL)
return SGX_ERROR_UNEXPECTED;
// calculate public_key size and return error for unexpected results
uint32_t pk_size = sgx_get_add_mac_txt_len((const sgx_sealed_data_t *)sealed);
uint32_t sk_size = sgx_get_encrypt_txt_len((const sgx_sealed_data_t *)sealed);
if ((pk_size != 2*SGX_ECP256_KEY_SIZE) || (sk_size != SGX_ECP256_KEY_SIZE))
return SGX_ERROR_UNEXPECTED;
sgx_status_t public_key(uint8_t *gx, uint8_t *gy) {
// TODO
// allocate memory for public and secret key
uint8_t *pk =(uint8_t *)malloc(pk_size);
uint8_t *sk =(uint8_t *)malloc(pk_size);
if((pk == NULL) || (sk == NULL)) {
free(pk);
free(sk);
return SGX_ERROR_OUT_OF_MEMORY;
}
// unseal ecc key pair
sgx_status_t status = sgx_unseal_data((const sgx_sealed_data_t *)sealed, pk, &pk_size, sk, &sk_size);
if (status != SGX_SUCCESS) {
free(pk);
free(sk);
return status;
}
// copy public key into return buffers
if((gx != NULL) && (gy != NULL)) {
memcpy(gx, pk, SGX_ECP256_KEY_SIZE);
memcpy(gy, pk + SGX_ECP256_KEY_SIZE, SGX_ECP256_KEY_SIZE);
}
// free allocated memory and return success
free(pk);
free(sk);
return SGX_SUCCESS;
}
sgx_status_t sign_firmware(uint8_t *data, size_t data_size, uint8_t *signature, size_t signature_size) {