 dettanym
|
3d120ee423
Adding code to commit before working on local copy.
|
%!s(int64=5) %!d(string=hai) anos |
|
dettanym
|
68189597cf
Decryptor.so is compiled and linked now.
|
%!s(int64=5) %!d(string=hai) anos |
|
dettanym
|
a70a827f08
Some changes to decryptor cpp file
|
%!s(int64=5) %!d(string=hai) anos |
|
dettanym
|
e7c327e63e
Not compiling yet - need to go through errors for decryptor.cpp and for localattestationtrusted.cpp
|
%!s(int64=5) %!d(string=hai) anos |
|
dettanym
|
4a985beaaa
Made new header files for custom classes and added some changes to cpp files
|
%!s(int64=5) %!d(string=hai) anos |
|
dettanym
|
b9991f04ab
Refactored code - to make it easier to set up encryption to enclaves and to the client
|
%!s(int64=5) %!d(string=hai) anos |
|
dettanym
|
0ae1160096
No encryption between apache and decryptor - managed to get same derived key. Need to decrypt properly.
|
%!s(int64=6) %!d(string=hai) anos |
|
dettanym
|
94b5df506b
Refactored some decryptors client data decryption code and added in encryption with Apache. Does not work with client side extension.
|
%!s(int64=6) %!d(string=hai) anos |
|
dettanym
|
a27c0b3ca8
Got decryption of client data working. Yet to encrypt client-data back to the Apache. Refactored decryptor client data decryption functions in trusted and untrusted code. Added in a new base64 decoding function (CommonOpensslCode was intended to contain base64 function and it was supposed to be linkable by both trusted, untrusted code, but couldnot get the app to link against the same version of openssl as intel-sgx-ssl.
|
%!s(int64=6) %!d(string=hai) anos |
|
dettanym
|
02c5dc0152
Encrypts hardcoded strings in aesgcm (for clientside extension)
|
%!s(int64=6) %!d(string=hai) anos |
|
dettanym
|
61c3e45943
Compiled and linked against working copy of ECDHE key generation (Mitigator header) + shared secret + derived key code. Can port ECDSA signing code to openssl for clarity.
|
%!s(int64=6) %!d(string=hai) anos |
|
dettanym
|
c508171e76
Got decryptor working with intel-sgx-ssl libraries without any linker errors. Added in sample ECDHE key and shared secret generation code, key derivation code that worked outside sgx
|
%!s(int64=6) %!d(string=hai) anos |
|
dettanym
|
a20b36689c
Not working commit of compiling ECDHE key generation code. Correct code is in openssl_ecdhe folder. Linking error of thread functions not defined in stdc keeps throwing up.
|
%!s(int64=6) %!d(string=hai) anos |
|
dettanym
|
6e1febba9c
Added in ECDHE key generation code - does not work with 2 implementations on JS side
|
%!s(int64=6) %!d(string=hai) anos |
|
dettanym
|
cb9e34027d
Added in new interface to send post-LA msgs so we don't need to know the size of msgs beforehand for native read/write sys calls
|
%!s(int64=6) %!d(string=hai) anos |
|
dettanym
|
95ebb52e20
Modified ecalls and interface for post-LA AES encryption and decryption functions. Seems to work
|
%!s(int64=6) %!d(string=hai) anos |
|
dettanym
|
0ee2a787ef
Works with verifier + Apache!
|
%!s(int64=6) %!d(string=hai) anos |
|
dettanym
|
4d36ab706b
Pre-verification changes - ecdsa verification function remains in decryptor.cpp but is not being called
|
%!s(int64=6) %!d(string=hai) anos |
|
dettanym
|
3e7ec25c87
Got signature to be verified in encrypt_mitigator_header_value - had to change LA function signature to send public key from untrusted app
|
%!s(int64=6) %!d(string=hai) anos |
|
dettanym
|
a293868311
Removed bug in ecdsa signature generation for message sent to Apache enclave
|
%!s(int64=6) %!d(string=hai) anos |
|
dettanym
|
c13b0dc0b2
Removed repeated code
|
%!s(int64=6) %!d(string=hai) anos |
|
dettanym
|
84ac2070dd
Works with sample verifier mrenclave being encrypted and written to Apache. Verification of signature not done yet.
|
%!s(int64=6) %!d(string=hai) anos |
|
dettanym
|
db9db9cc96
Post LA encryption works
|
%!s(int64=6) %!d(string=hai) anos |
|
dettanym
|
e1f77b314f
EDL files - private ecalls are not inter-enclave function calls. For inter-enclave function calls, entries are removed from the edl files. Added in code for verify_peer_enclave_trust to save the mrenclave of the 1st LA and to compare mrsigner to a global one the second time LA is called. Cleaned up unused functions.
|
%!s(int64=6) %!d(string=hai) anos |
|
dettanym
|
5aea4929f0
Removed unused functions in main decryptor code
|
%!s(int64=6) %!d(string=hai) anos |
|
dettanym
|
5268bf9954
Sealed signing keypair 1
|
%!s(int64=6) %!d(string=hai) anos |
|
dettanym
|
5c090407ec
Added in files for modular LA in app. (Forgot to add them in last commit)
|
%!s(int64=6) %!d(string=hai) anos |
|
dettanym
|
74ba6f2f7f
Refactored LA code that is outside the enclave
|
%!s(int64=6) %!d(string=hai) anos |
|
dettanym
|
5196f3802a
Changed the order of the private and the public key in the serialization and deserialization functions, so that a public key can be serialized for ECDSA signing
|
%!s(int64=6) %!d(string=hai) anos |
|
dettanym
|
514af6f3b3
Can now generate keypair, seal both parts to a file and unseal them, if the file already exists.
|
%!s(int64=6) %!d(string=hai) anos |
