Compare commits

..

71 commits

Author SHA1 Message Date
Sascha Tommasone
2343da8d1e
[Assignment-7] fix missing semicolon
All checks were successful
Latex Build / build-latex (Assignment 4 - Protokollsicherheit (Praxis)) (push) Successful in 1m5s
Latex Build / build-latex (Assignment 5 - Software Security - Teil 1) (push) Successful in 1m4s
Latex Build / build-latex (Assignment 6 - Software Security - Teil 2) (push) Successful in 59s
2024-07-08 13:05:20 +02:00
9acbc8be3e master: abgabe 7 pdf
All checks were successful
Latex Build / build-latex (Assignment 4 - Protokollsicherheit (Praxis)) (push) Successful in 1m3s
Latex Build / build-latex (Assignment 5 - Software Security - Teil 1) (push) Successful in 1m2s
Latex Build / build-latex (Assignment 6 - Software Security - Teil 2) (push) Successful in 1m0s
2024-07-08 12:50:16 +02:00
Sascha Tommasone
005d529757
[Assignment-7] remove redundant code
All checks were successful
Latex Build / build-latex (Assignment 4 - Protokollsicherheit (Praxis)) (push) Successful in 1m4s
Latex Build / build-latex (Assignment 5 - Software Security - Teil 1) (push) Successful in 1m3s
Latex Build / build-latex (Assignment 6 - Software Security - Teil 2) (push) Successful in 1m1s
2024-07-08 12:44:02 +02:00
f9258b4e55
master: abgabe 7 wrong curve mentioned
Some checks failed
Latex Build / build-latex (Assignment 6 - Software Security - Teil 2) (push) Waiting to run
Latex Build / build-latex (Assignment 4 - Protokollsicherheit (Praxis)) (push) Successful in 1m1s
Latex Build / build-latex (Assignment 5 - Software Security - Teil 1) (push) Has been cancelled
2024-07-08 12:42:17 +02:00
Sascha Tommasone
ea22e2fb99
[Assignment-7] fix README.md
All checks were successful
Latex Build / build-latex (Assignment 4 - Protokollsicherheit (Praxis)) (push) Successful in 1m6s
Latex Build / build-latex (Assignment 5 - Software Security - Teil 1) (push) Successful in 1m2s
Latex Build / build-latex (Assignment 6 - Software Security - Teil 2) (push) Successful in 59s
2024-07-08 12:34:37 +02:00
65ce338921 Merge pull request 'Assignment 7' (#4) from Assignment-7 into master
All checks were successful
Latex Build / build-latex (Assignment 4 - Protokollsicherheit (Praxis)) (push) Successful in 32s
Latex Build / build-latex (Assignment 5 - Software Security - Teil 1) (push) Successful in 32s
Latex Build / build-latex (Assignment 6 - Software Security - Teil 2) (push) Successful in 31s
Reviewed-on: #4
2024-07-08 11:19:48 +02:00
Sascha Tommasone
18cc163954 [Assignment-7] fixed missing abgabe.pdf 2024-07-08 11:19:48 +02:00
Sascha Tommasone
e8ad2e0abb [Assignment-7] fixed missing abgabe.pdf; fixed repo link in README.md 2024-07-08 11:19:48 +02:00
Sascha Tommasone
d2f1a1e04b [Assignmnt-7] rename directory 2024-07-08 11:19:48 +02:00
Sascha Tommasone
f9b49a2119 [Assignment-7] fixed README.md 2024-07-08 11:19:48 +02:00
445e42f4d3 [Assignment-7] Add License / Copy Notices 2024-07-08 11:19:48 +02:00
chronal
f54a8e5567 Assignment 7 sgximpl: refactor README for project needs 2024-07-08 11:19:48 +02:00
chronal
9879feb09b Assignment 7 sgximpl: README update 2024-07-08 11:19:48 +02:00
chronal
97f1ecfe9f Assignment 7 sgximpl: GNU GPLv3 License 2024-07-08 11:19:48 +02:00
Sascha Tommasone
fc0438e5dd [Assignment-7] final 2024-07-08 11:19:48 +02:00
chronal
ff8779256c Assignment 7 sgximpl: readme compilation hint 2024-07-08 11:19:48 +02:00
chronal
f088d661af Assignment 7 sgximpl: README.md compiling 2024-07-08 11:19:48 +02:00
Sascha Tommasone
c9b6e749a7 [Assignment-7] update Makefile and simulate.sh 2024-07-08 11:19:48 +02:00
Sascha Tommasone
00b8bf74af [Assignment-7] setup script 2024-07-08 11:19:48 +02:00
Sascha Tommasone
c1b780e41f [Assignment-7] cleanup 2024-07-08 11:19:48 +02:00
Sascha Tommasone
10a1119eb4 [Assignment-7] cleanup 2024-07-08 11:19:48 +02:00
Sascha Tommasone
3c3671a579 [Assingment-7] updated simulate.sh 2024-07-08 11:19:48 +02:00
04fda7586f [Assignment-7] update simulate.sh 2024-07-08 11:19:48 +02:00
2829fdad19 [Assignment-7] add simulate.sh 2024-07-08 11:19:48 +02:00
c3c1de2811 [Assignment-7] small changes 2024-07-08 11:19:48 +02:00
Sascha Tommasone
1b83c83a4f [Assignment-7] fixed typo 2024-07-08 11:19:48 +02:00
b901e63f99 [Assignment-7] add keys of Bob and Oskar 2024-07-08 11:19:48 +02:00
Sascha Tommasone
6a1ee981e1 [Assignment-7] added embedded device to main.c; adjusted parameter parsing 2024-07-08 11:19:48 +02:00
Sascha Tommasone
83d943940c [Assignment-7] add embedded_device_syntax; add .h 2024-07-08 11:19:48 +02:00
c1bdc5b079 [Assignment-7] update flake and add missing enclave files 2024-07-08 11:19:48 +02:00
Sascha Tommasone
90ea867646 [Assignment-7] adjusted some error messages 2024-07-08 11:19:48 +02:00
Sascha Tommasone
a4303acdf6 [Assignment-7] embedded_device 2024-07-08 11:19:48 +02:00
36ce364e2d [Assignment-7] cleanup 2024-07-08 11:19:48 +02:00
feb0bd1b73 [Assignment-7] app restructure and cleanup 2024-07-08 11:19:48 +02:00
Sascha Tommasone
9cd7ef8703 [Assignment-7] . 2024-07-08 11:19:48 +02:00
Sascha Tommasone
c99556a595 [Assignment-7] embedded device prototype 2024-07-08 11:19:48 +02:00
Sascha Tommasone
05ea23459f [Assignment-7] . 2024-07-08 11:19:48 +02:00
f573b0c28a [Assignment-7] add keys of alice 2024-07-08 11:19:48 +02:00
Sascha Tommasone
bb11ef02e4 [Assignment-7] fixed header spelling 2024-07-08 11:19:48 +02:00
355e8560f6 [Assignment-7] working implementation of untrusted 2024-07-08 11:19:48 +02:00
Sascha Tommasone
e3daea6279 [Assignment-7] added missing comma 2024-07-08 11:19:48 +02:00
Sascha Tommasone
f865836630 [Assignment-7] fixed endianess of staff public key 2024-07-08 11:19:48 +02:00
Sascha Tommasone
3b2b203415 [Assignment-7] add first staff public key; enabled request verification 2024-07-08 11:19:48 +02:00
Sascha Tommasone
04e2894de0 [Assignment-7] fixed wrong data size parameter given to sgx_ecdsa_sign 2024-07-08 11:19:48 +02:00
Sascha Tommasone
c1351d4853 [Assignment-7] hardcoded public key/signatures sizes; cleaned up unused code 2024-07-08 11:19:48 +02:00
Sascha Tommasone
20529e2768 [Assignment-7] fixed endianess problems 2024-07-08 11:19:48 +02:00
6d966e0b94 [Assignment-7] App Intermediary and Proxy
- Intermediary is fully functional
- Proxy is ready until invocation of enclave
2024-07-08 11:19:48 +02:00
Sascha Tommasone
b41976a5ff [Assignment-7] changes to .edl .h based on enclave.c 2024-07-08 11:19:48 +02:00
Sascha Tommasone
79dbf59cee [Assignment-7] modified makefile 2024-07-08 11:19:48 +02:00
Sascha Tommasone
7dfa8b9e37 [Assignment-7] update verify_firmware 2024-07-08 11:19:48 +02:00
Sascha Tommasone
59e6be83c7 [Assignment-7] update sign_firmware 2024-07-08 11:19:48 +02:00
Sascha Tommasone
fd31523ce5 [Assignment-7] new function 'static sgx_status_t verify_signature' 2024-07-08 11:19:48 +02:00
Sascha Tommasone
9364000b83 [Assignment-7] (un)seal_key_pair now static functions 2024-07-08 11:19:48 +02:00
Sascha Tommasone
9cd8b37cc5 [Assignment-7] authorized public keys 2024-07-08 11:19:48 +02:00
6779eb608e [Assignment-7] Repair Flake 2024-07-08 11:19:48 +02:00
25a5ca3e2d [Assignment-7] Flake + App base
- Add Assignment-7 to flake.nix
- Implement basic framework of app
- Implement proxy subcommand (mostly)
- Implement basics of intermediary subcommand
2024-07-08 11:19:48 +02:00
Sascha Tommasone
0d6b13fafa [Assignment-7] prototype verify_firmware 2024-07-08 11:19:48 +02:00
Sascha Tommasone
7a592dc225 [Assignment-7] sign_firmware: removed dynamic memory allocations; added sealing of key after creation; uint8_t *sealed is now two way pointer; improved error handling 2024-07-08 11:19:48 +02:00
Sascha Tommasone
8da66bea12 [Assignment-7] public_key: renamed to get_public_key; improved error handling 2024-07-08 11:19:48 +02:00
Sascha Tommasone
3ea3076945 [Assignment-7] unseal_key_pair: removed dynamic memory allocations; removed unused parameter; improved error handling 2024-07-08 11:19:48 +02:00
Sascha Tommasone
97dfb2b82e [Assignment-7] seal_key_pair: removed dynamic memory allocations; fixed pointer usage 2024-07-08 11:19:48 +02:00
Sascha Tommasone
83ad706ad7 [Assignment-7] size ecalls 2024-07-08 11:19:48 +02:00
Sascha Tommasone
6aaaa3de9a [Assignment-7] improved error handling; add (un)sealing prototypes 2024-07-08 11:19:48 +02:00
Sascha Tommasone
cb380685a8 [Assignment-7] security fix in sign_firmware 2024-07-08 11:19:48 +02:00
Sascha Tommasone
5e0d13b84e [Assignment-7] add seal prototype 2024-07-08 11:19:48 +02:00
Sascha Tommasone
7ef4e42ef9 [Assignment-7] add prototype 'sgx_status_t public_key' 2024-07-08 11:19:48 +02:00
Sascha Tommasone
07254a8036 [Assignment-7] sign_firmware returns signature 2024-07-08 11:19:48 +02:00
Sascha Tommasone
76d8d4a2f4 [Assignment-7] add first enclave part 2024-07-08 11:19:48 +02:00
chronal
4a5261f6ec Assignment 7 sgximl: lib 2024-07-08 11:19:48 +02:00
chronal
0023864b0a Assignment 7 sgximpl don't ignore lib/ 2024-07-08 11:19:48 +02:00
chronal
01182627e0 Assignment 7 sgximpl: initialize project structure 2024-07-08 11:19:48 +02:00
4 changed files with 2 additions and 9 deletions

View file

@ -4,7 +4,7 @@ Documentation of the Assignment 7 in Systems Security at Ruhr-Universität Bochu
This is a program, that uses a TEE to build a signature relay to sign firmware with a master key.
For more informationm, read the [project description](doc/abgabe.pdf).
We recommend viewing the [repository]("https://git.pfzetto.de/RubNoobs/Systemsicherheit/src/branch/master/Assignment 7 - SGX Hands-on") we worked on together at.
We recommend viewing the [repository](https://git.pfzetto.de/RubNoobs/Systemsicherheit/src/branch/master/Assignment%207%20-%20SGX%20Hands-on) we worked on together at.
## Requirements

View file

@ -122,7 +122,6 @@ Erst, wenn der Schlüssel in die Enclave kommt und entsiegelt wird, kann der Sch
Die Enclave bietet eine Schnittstelle für Signaturen mit ECDSA an.
Dabei wird die Kurve secp256r1 verwendet.
== Vorteile
Dieses Programm bietet einige Vorteile, unter anderem:

View file

@ -206,13 +206,7 @@ sgx_status_t get_public_key(const uint8_t *sealed, uint32_t sealed_size, uint8_t
}
// unseal public key
sgx_status_t status;
if((status = unseal_key_pair(sealed, NULL, (sgx_ec256_public_t *)public)) != SGX_SUCCESS) {
return status;
}
// return success
return status;
return unseal_key_pair(sealed, NULL, (sgx_ec256_public_t *)public);
}
/*