Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Multiple enclave keys support #78

Merged
merged 31 commits into from
Jul 19, 2023
Merged

Multiple enclave keys support #78

merged 31 commits into from
Jul 19, 2023

Conversation

bluele
Copy link
Member

@bluele bluele commented Jul 19, 2023

Core

  • introduce a new Enclave Key Manager that uses SQLite
    • It was chosen because it is desirable that there can be multiple writer processes and be able to use flexible query
  • use sgx_tseal as sealing library
    • Because of the change from file to DB management

Relayer

  • relayer now checks the expiry date of the keys it uses
  • also fetches a list of available keys from the LCP service and selects the appropriate one
  • add key_expiration field to config

CLI

  • removed the following commands
    • enclave init-key
    • enclave show-avr
  • instead, added the following
    • enclave generate-key: generate a new enclave key
    • enclave list-keys: show available keys
    • enclave prune-keys: prune expired keys

bluele added 30 commits June 30, 2023 17:15
… Key

Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
…onfig

Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
@bluele bluele changed the title Multiple enclave key support Multiple enclave keys support Jul 19, 2023
Signed-off-by: Jun Kimura <jun.kimura@datachain.jp>
@bluele bluele merged commit 8efd38f into main Jul 19, 2023
3 checks passed
@bluele bluele deleted the multiple-ek branch July 19, 2023 09:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant