ccc-certifier-framework / certifier-framework-for-confidential-computing

The Confidential Computing Certifier Framework consists of a client API called the Certifier-API and server-based policy evaluation called the Certifier Service. It simplifies and unifies programming and operations support for multi-vendor Confidential Computing platforms by providing support for scalable, policy-driven trust management including
Apache License 2.0
52 stars 15 forks source link

simple_app unprotect_blob() fails w/--public_key_alg=rsa-3072 --auth_symmetric_key_alg=aes-256-cbc-hmac-sha384 #235

Open gapisback opened 8 months ago

gapisback commented 8 months ago

Testing with test case run_test-crypto_algorithms added by PR https://github.com/vmware-research/certifier-framework-for-confidential-computing/pull/232 , simple_app fails to succeed when run with this pair of crypto-algorithms: --public_key_alg=rsa-3072 --auth_symmetric_key_alg=aes-256-cbc-hmac-sha384

run_example.sh: simple_app: Running run_app_by_name_as_server_talk_to_Cert_Service
+ set +x
run_example.sh: Public-key algorithm: '--public_key_alg=rsa-3072', Authenticated Symmetric-key algorithm: '--auth_symmetric_key_alg=aes-256-cbc-hmac-sha384'

+ /home/agurajada/Code/certifier-framework-for-confidential-computing/sample_apps/simple_app/example_app.exe \
           --data_dir=./app2_data/ --operation=cold-init --measurement_file=example_app.measurement \
           --policy_store_file=policy_store \
          --public_key_alg=rsa-3072 --auth_symmetric_key_alg=aes-256-cbc-hmac-sha384 \
         --print_all=true 

measurement file='example_app.measurement', public_key_alg='rsa-3072', authenticated_symmetric_key_alg='aes-256-cbc-hmac-sha384
+ set +x

+ sleep 1
+ set +x

+ /home/agurajada/Code/certifier-framework-for-confidential-computing/sample_apps/simple_app/example_app.exe --data_dir=./app2_data/ --operation=get-certified --measurement_file=example_app.measurement --policy_store_file=policy_store --public_key_alg=rsa-3072 --auth_symmetric_key_alg=aes-256-cbc-hmac-sha384 --print_all=true
measurement file='example_app.measurement', unprotect_blob() error, line 962, unprotect_blob, unsupported encryption scheme: 'aes-256-cbc-hmac-sha384'
fetch_store(): Can't Unprotect
warm_restart() error, line 1367, Can't fetch store
main() error, line 442, warm-restart failed
gapisback commented 7 months ago

Testing out if I can add a comment (using gitHub login ID gapisback)

jlmucb commented 7 months ago

yep