Change sim signing certs to use ECDSA

[nick-mobilecoin]

Previously the sim signing certificates used RSA keys. Now they use
ECDSA keys. Changing to ECDSA allows for re-use with DCAP quote signing
which happen to use ECDSA signatures

[nick-mobilecoin]

Current dependencies on/for this PR:

• master
  • PR Change sim signing certs to use ECDSA #3480 👈
    • PR Bump SGX crates to 0.7.3 #3481
      • PR Add DCAP logic for getting a Quote3 #3482

This comment was auto-generated by Graphite.

[eranrund]

Since I'm lacking a lot of context here, can you please elaborate on how these sim keys are going to be used in DCAP data structures?

[nick-mobilecoin]

Since I'm lacking a lot of context here, can you please elaborate on how these sim keys are going to be used in DCAP data structures?

I changed description to say "quote signing" instead of the generic data structures.

Normally we use the root CA provided by Intel to check a certificate chain created by the PCE (provisioning certificate enclave), this chain signs the quote generated by the QE (quoting enclave).
These enclaves are built and signed by Intel and only work on actual SGX hardware. These certificate chains use ECDSA some other signatures inside the DCAP quote also use EDCDSA.

In order to work in a simulated SGX environment we provide a fake certificate chain that creates and signs the DCAP quote, #3482. This PR is to update the certificates to use ECDSA so that all the sim logic in the DCAP quote is ECDSA signing.

[nick-mobilecoin]

@nick-mobilecoin started a stack merge that includes this pull request via Graphite.

[nick-mobilecoin]

@nick-mobilecoin merged this pull request with Graphite.