Skip to content

Commit

Permalink
attest: Use ECDH+SHA+AES over RSA as TEE pub key
Browse files Browse the repository at this point in the history
At present, there are performance limitations when using the Rust RSA
crate with no_std. There is also a desire for EC key
encryption/decryption. As such, replace the usage of RSA keys with EC
keys.

The initial implementation uses ECDH384+SHA256+AES128 symmetric
encryption.

Signed-off-by: Tyler Fanelli <[email protected]>
  • Loading branch information
tylerfanelli committed Dec 11, 2024
1 parent 75245c3 commit 5dc6dac
Show file tree
Hide file tree
Showing 8 changed files with 164 additions and 217 deletions.
155 changes: 23 additions & 132 deletions Cargo.lock

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 5 additions & 5 deletions Cargo.toml
Original file line number Diff line number Diff line change
Expand Up @@ -43,30 +43,30 @@ libaproxy = { path = "libaproxy" }
syscall = { path = "syscall" }
packit = { path = "packit" }
userlib = { path = "user/lib" }
userinit = { path = "user/init" }

# crates.io
aes = "0.8.4"
aes-gcm = { version = "0.10.3", default-features = false }
arbitrary = "1.3.0"
base64 = { version = "0.22.1", default-features = false, features = ["alloc"] }
bitfield-struct = "0.6.2"
bitflags = "2.4"
clap = { version = "4.4.14", default-features = false }
elliptic-curve = { version = "0.13.8", features = ["jwk"] }
gdbstub = { version = "0.6.6", default-features = false }
gdbstub_arch = { version = "0.2.4" }
igvm = { version = "0.3.2", default-features = false }
igvm_defs = { version = "0.3.2", default-features = false }
intrusive-collections = "0.9.6"
kbs-types = { version = "0.8.0", default-features = false, features = ["alloc"] }
kbs-types = { version = "0.9.1", default-features = false, features = ["alloc"] }
libfuzzer-sys = "0.4"
log = "0.4.17"
p384 = { version = "0.13.0" }
p384 = { version = "0.13.0", default-features = false, features = ["alloc", "arithmetic", "ecdh", "jwk"] }
rand_chacha = { version = "0.3.1", default-features = false }
rdrand = { version = "0.8.3", default-features = false }
rsa = { version = "0.9.6", default-features = false }
serde = { version = "1.0.215", default-features = false, features = ["alloc", "derive"] }
serde_json = { version = "1.0", default-features = false, features = ["alloc"] }
sha2 = { version = "0.9.2", default-features = false, features = ["force-soft"] }
sha2 = { version = "0.10.8", default-features = false, features = ["force-soft"] }
uuid = "1.6.1"
# Add the derive feature by default because all crates use it.
zerocopy = { version = "0.8.2", features = ["derive"] }
Expand Down
Loading

0 comments on commit 5dc6dac

Please sign in to comment.