Compare commits

..

71 commits

Author SHA1 Message Date
Sascha Tommasone
2343da8d1e
[Assignment-7] fix missing semicolon
All checks were successful
Latex Build / build-latex (Assignment 4 - Protokollsicherheit (Praxis)) (push) Successful in 1m5s
Latex Build / build-latex (Assignment 5 - Software Security - Teil 1) (push) Successful in 1m4s
Latex Build / build-latex (Assignment 6 - Software Security - Teil 2) (push) Successful in 59s
2024-07-08 13:05:20 +02:00
9acbc8be3e master: abgabe 7 pdf
All checks were successful
Latex Build / build-latex (Assignment 4 - Protokollsicherheit (Praxis)) (push) Successful in 1m3s
Latex Build / build-latex (Assignment 5 - Software Security - Teil 1) (push) Successful in 1m2s
Latex Build / build-latex (Assignment 6 - Software Security - Teil 2) (push) Successful in 1m0s
2024-07-08 12:50:16 +02:00
Sascha Tommasone
005d529757
[Assignment-7] remove redundant code
All checks were successful
Latex Build / build-latex (Assignment 4 - Protokollsicherheit (Praxis)) (push) Successful in 1m4s
Latex Build / build-latex (Assignment 5 - Software Security - Teil 1) (push) Successful in 1m3s
Latex Build / build-latex (Assignment 6 - Software Security - Teil 2) (push) Successful in 1m1s
2024-07-08 12:44:02 +02:00
f9258b4e55
master: abgabe 7 wrong curve mentioned
Some checks failed
Latex Build / build-latex (Assignment 6 - Software Security - Teil 2) (push) Waiting to run
Latex Build / build-latex (Assignment 4 - Protokollsicherheit (Praxis)) (push) Successful in 1m1s
Latex Build / build-latex (Assignment 5 - Software Security - Teil 1) (push) Has been cancelled
2024-07-08 12:42:17 +02:00
Sascha Tommasone
ea22e2fb99
[Assignment-7] fix README.md
All checks were successful
Latex Build / build-latex (Assignment 4 - Protokollsicherheit (Praxis)) (push) Successful in 1m6s
Latex Build / build-latex (Assignment 5 - Software Security - Teil 1) (push) Successful in 1m2s
Latex Build / build-latex (Assignment 6 - Software Security - Teil 2) (push) Successful in 59s
2024-07-08 12:34:37 +02:00
65ce338921 Merge pull request 'Assignment 7' (#4) from Assignment-7 into master
All checks were successful
Latex Build / build-latex (Assignment 4 - Protokollsicherheit (Praxis)) (push) Successful in 32s
Latex Build / build-latex (Assignment 5 - Software Security - Teil 1) (push) Successful in 32s
Latex Build / build-latex (Assignment 6 - Software Security - Teil 2) (push) Successful in 31s
Reviewed-on: #4
2024-07-08 11:19:48 +02:00
Sascha Tommasone
18cc163954 [Assignment-7] fixed missing abgabe.pdf 2024-07-08 11:19:48 +02:00
Sascha Tommasone
e8ad2e0abb [Assignment-7] fixed missing abgabe.pdf; fixed repo link in README.md 2024-07-08 11:19:48 +02:00
Sascha Tommasone
d2f1a1e04b [Assignmnt-7] rename directory 2024-07-08 11:19:48 +02:00
Sascha Tommasone
f9b49a2119 [Assignment-7] fixed README.md 2024-07-08 11:19:48 +02:00
445e42f4d3 [Assignment-7] Add License / Copy Notices 2024-07-08 11:19:48 +02:00
chronal
f54a8e5567 Assignment 7 sgximpl: refactor README for project needs 2024-07-08 11:19:48 +02:00
chronal
9879feb09b Assignment 7 sgximpl: README update 2024-07-08 11:19:48 +02:00
chronal
97f1ecfe9f Assignment 7 sgximpl: GNU GPLv3 License 2024-07-08 11:19:48 +02:00
Sascha Tommasone
fc0438e5dd [Assignment-7] final 2024-07-08 11:19:48 +02:00
chronal
ff8779256c Assignment 7 sgximpl: readme compilation hint 2024-07-08 11:19:48 +02:00
chronal
f088d661af Assignment 7 sgximpl: README.md compiling 2024-07-08 11:19:48 +02:00
Sascha Tommasone
c9b6e749a7 [Assignment-7] update Makefile and simulate.sh 2024-07-08 11:19:48 +02:00
Sascha Tommasone
00b8bf74af [Assignment-7] setup script 2024-07-08 11:19:48 +02:00
Sascha Tommasone
c1b780e41f [Assignment-7] cleanup 2024-07-08 11:19:48 +02:00
Sascha Tommasone
10a1119eb4 [Assignment-7] cleanup 2024-07-08 11:19:48 +02:00
Sascha Tommasone
3c3671a579 [Assingment-7] updated simulate.sh 2024-07-08 11:19:48 +02:00
04fda7586f [Assignment-7] update simulate.sh 2024-07-08 11:19:48 +02:00
2829fdad19 [Assignment-7] add simulate.sh 2024-07-08 11:19:48 +02:00
c3c1de2811 [Assignment-7] small changes 2024-07-08 11:19:48 +02:00
Sascha Tommasone
1b83c83a4f [Assignment-7] fixed typo 2024-07-08 11:19:48 +02:00
b901e63f99 [Assignment-7] add keys of Bob and Oskar 2024-07-08 11:19:48 +02:00
Sascha Tommasone
6a1ee981e1 [Assignment-7] added embedded device to main.c; adjusted parameter parsing 2024-07-08 11:19:48 +02:00
Sascha Tommasone
83d943940c [Assignment-7] add embedded_device_syntax; add .h 2024-07-08 11:19:48 +02:00
c1bdc5b079 [Assignment-7] update flake and add missing enclave files 2024-07-08 11:19:48 +02:00
Sascha Tommasone
90ea867646 [Assignment-7] adjusted some error messages 2024-07-08 11:19:48 +02:00
Sascha Tommasone
a4303acdf6 [Assignment-7] embedded_device 2024-07-08 11:19:48 +02:00
36ce364e2d [Assignment-7] cleanup 2024-07-08 11:19:48 +02:00
feb0bd1b73 [Assignment-7] app restructure and cleanup 2024-07-08 11:19:48 +02:00
Sascha Tommasone
9cd7ef8703 [Assignment-7] . 2024-07-08 11:19:48 +02:00
Sascha Tommasone
c99556a595 [Assignment-7] embedded device prototype 2024-07-08 11:19:48 +02:00
Sascha Tommasone
05ea23459f [Assignment-7] . 2024-07-08 11:19:48 +02:00
f573b0c28a [Assignment-7] add keys of alice 2024-07-08 11:19:48 +02:00
Sascha Tommasone
bb11ef02e4 [Assignment-7] fixed header spelling 2024-07-08 11:19:48 +02:00
355e8560f6 [Assignment-7] working implementation of untrusted 2024-07-08 11:19:48 +02:00
Sascha Tommasone
e3daea6279 [Assignment-7] added missing comma 2024-07-08 11:19:48 +02:00
Sascha Tommasone
f865836630 [Assignment-7] fixed endianess of staff public key 2024-07-08 11:19:48 +02:00
Sascha Tommasone
3b2b203415 [Assignment-7] add first staff public key; enabled request verification 2024-07-08 11:19:48 +02:00
Sascha Tommasone
04e2894de0 [Assignment-7] fixed wrong data size parameter given to sgx_ecdsa_sign 2024-07-08 11:19:48 +02:00
Sascha Tommasone
c1351d4853 [Assignment-7] hardcoded public key/signatures sizes; cleaned up unused code 2024-07-08 11:19:48 +02:00
Sascha Tommasone
20529e2768 [Assignment-7] fixed endianess problems 2024-07-08 11:19:48 +02:00
6d966e0b94 [Assignment-7] App Intermediary and Proxy
- Intermediary is fully functional
- Proxy is ready until invocation of enclave
2024-07-08 11:19:48 +02:00
Sascha Tommasone
b41976a5ff [Assignment-7] changes to .edl .h based on enclave.c 2024-07-08 11:19:48 +02:00
Sascha Tommasone
79dbf59cee [Assignment-7] modified makefile 2024-07-08 11:19:48 +02:00
Sascha Tommasone
7dfa8b9e37 [Assignment-7] update verify_firmware 2024-07-08 11:19:48 +02:00
Sascha Tommasone
59e6be83c7 [Assignment-7] update sign_firmware 2024-07-08 11:19:48 +02:00
Sascha Tommasone
fd31523ce5 [Assignment-7] new function 'static sgx_status_t verify_signature' 2024-07-08 11:19:48 +02:00
Sascha Tommasone
9364000b83 [Assignment-7] (un)seal_key_pair now static functions 2024-07-08 11:19:48 +02:00
Sascha Tommasone
9cd8b37cc5 [Assignment-7] authorized public keys 2024-07-08 11:19:48 +02:00
6779eb608e [Assignment-7] Repair Flake 2024-07-08 11:19:48 +02:00
25a5ca3e2d [Assignment-7] Flake + App base
- Add Assignment-7 to flake.nix
- Implement basic framework of app
- Implement proxy subcommand (mostly)
- Implement basics of intermediary subcommand
2024-07-08 11:19:48 +02:00
Sascha Tommasone
0d6b13fafa [Assignment-7] prototype verify_firmware 2024-07-08 11:19:48 +02:00
Sascha Tommasone
7a592dc225 [Assignment-7] sign_firmware: removed dynamic memory allocations; added sealing of key after creation; uint8_t *sealed is now two way pointer; improved error handling 2024-07-08 11:19:48 +02:00
Sascha Tommasone
8da66bea12 [Assignment-7] public_key: renamed to get_public_key; improved error handling 2024-07-08 11:19:48 +02:00
Sascha Tommasone
3ea3076945 [Assignment-7] unseal_key_pair: removed dynamic memory allocations; removed unused parameter; improved error handling 2024-07-08 11:19:48 +02:00
Sascha Tommasone
97dfb2b82e [Assignment-7] seal_key_pair: removed dynamic memory allocations; fixed pointer usage 2024-07-08 11:19:48 +02:00
Sascha Tommasone
83ad706ad7 [Assignment-7] size ecalls 2024-07-08 11:19:48 +02:00
Sascha Tommasone
6aaaa3de9a [Assignment-7] improved error handling; add (un)sealing prototypes 2024-07-08 11:19:48 +02:00
Sascha Tommasone
cb380685a8 [Assignment-7] security fix in sign_firmware 2024-07-08 11:19:48 +02:00
Sascha Tommasone
5e0d13b84e [Assignment-7] add seal prototype 2024-07-08 11:19:48 +02:00
Sascha Tommasone
7ef4e42ef9 [Assignment-7] add prototype 'sgx_status_t public_key' 2024-07-08 11:19:48 +02:00
Sascha Tommasone
07254a8036 [Assignment-7] sign_firmware returns signature 2024-07-08 11:19:48 +02:00
Sascha Tommasone
76d8d4a2f4 [Assignment-7] add first enclave part 2024-07-08 11:19:48 +02:00
chronal
4a5261f6ec Assignment 7 sgximl: lib 2024-07-08 11:19:48 +02:00
chronal
0023864b0a Assignment 7 sgximpl don't ignore lib/ 2024-07-08 11:19:48 +02:00
chronal
01182627e0 Assignment 7 sgximpl: initialize project structure 2024-07-08 11:19:48 +02:00
4 changed files with 2 additions and 9 deletions

View file

@ -4,7 +4,7 @@ Documentation of the Assignment 7 in Systems Security at Ruhr-Universität Bochu
This is a program, that uses a TEE to build a signature relay to sign firmware with a master key. This is a program, that uses a TEE to build a signature relay to sign firmware with a master key.
For more informationm, read the [project description](doc/abgabe.pdf). For more informationm, read the [project description](doc/abgabe.pdf).
We recommend viewing the [repository]("https://git.pfzetto.de/RubNoobs/Systemsicherheit/src/branch/master/Assignment 7 - SGX Hands-on") we worked on together at. We recommend viewing the [repository](https://git.pfzetto.de/RubNoobs/Systemsicherheit/src/branch/master/Assignment%207%20-%20SGX%20Hands-on) we worked on together at.
## Requirements ## Requirements

View file

@ -122,7 +122,6 @@ Erst, wenn der Schlüssel in die Enclave kommt und entsiegelt wird, kann der Sch
Die Enclave bietet eine Schnittstelle für Signaturen mit ECDSA an. Die Enclave bietet eine Schnittstelle für Signaturen mit ECDSA an.
Dabei wird die Kurve secp256r1 verwendet. Dabei wird die Kurve secp256r1 verwendet.
== Vorteile == Vorteile
Dieses Programm bietet einige Vorteile, unter anderem: Dieses Programm bietet einige Vorteile, unter anderem:

View file

@ -206,13 +206,7 @@ sgx_status_t get_public_key(const uint8_t *sealed, uint32_t sealed_size, uint8_t
} }
// unseal public key // unseal public key
sgx_status_t status; return unseal_key_pair(sealed, NULL, (sgx_ec256_public_t *)public);
if((status = unseal_key_pair(sealed, NULL, (sgx_ec256_public_t *)public)) != SGX_SUCCESS) {
return status;
}
// return success
return status;
} }
/* /*