This repo contains two enclaves (E_a and E_b) along with two untrusted apps A_a and A_b where E_a and E_b are managed by A_a and A_b respectively.

The apps A_a and A_b act as the untrusted transport between the two enclaves E_a and E_b. A_a communicates the outcome of the challenges to the user. The communication between A_a and A_b implemented using a named pipe.

The protocol between these two pairs of enclaves and applications can be described as:

The code is annotated in folowing keypoints:

1. Points of communication between A_a and A_b: Sending and receiving the public keys, the encrypted PSK, and the encrypted challenges/responses.
2. The points where the enclaves E_a and E_b generate their key pairs.
3. The points where the enclaves E_a and E_b calculate the shared secret.
4. The point where enclave E_a generates and encrypts the challenge.
5. The point where enclave E_a decrypts and verifies the response.
6. The point where enclave E_b decrypts the challenge.
7. The point where enclave E_b computes and encrypts the response.

Using the following format:

/***********************************************
 * 1. BEGIN: Enclave A: send public key to B and receive key from B
***********************************************/
<code here>
/***********************************************
 * 1. END: Enclave A: send public key to B and receive key from B
 ***********************************************/

This repo was done in context of System Security course assignment at ETH Zurich.