Samplecode for FLC DCAP remote attestation in production mode

[brenzi]

Dear @dingelish

So far we've only done RA in debug mode, which is pointless for a real application. After talking to Intel we've learned that RA is possible in production mode without obtaining any special license with Intel. The pointers they gave us were:

https://github.com/intel/SGXDataCenterAttestationPrimitives https://download.01.org/intel-sgx/dcap-1.0.1/docs/Intel_SGX_DCAP_ECDSA_Orientation.pdf https://01.org/intel-softwareguard-extensions/downloads/intel-sgx-dcap-linux-1.0.1-release https://software.intel.com/sites/default/files/managed/f1/b8/intel-sgx-support-for-third-party-attestation.pdf https://api.portal.trustedservices.intel.com/ (See the section titled “Attestation Services Utilizing ECDSA”)

Now the question for this rust SDK: Do you already have some samplecode to perform RA in production mode with this new procedure?

[dingelish]

I don't have one yet. But that's one of my goal to be solved in Q3 :-)

[nabilschear]

any update on this?

[dingelish]

Hi @nabilschear , I do have working enclave which generates and verifies. Will release soon!

[w-woloszyn]

Hi @dingelish, is this enclave available now?

[mssun]

Hi all, there is a reference implementation with both IAS (EPID) and DCAP (ECDSA) in the Teaclave platform:

• https://github.com/apache/incubator-teaclave/tree/master/dcap
• https://github.com/apache/incubator-teaclave/tree/master/attestation