inclavare-containers / rats-tls

RATS architecture based TLS using librats
31 stars 33 forks source link

verifiers: add verification among TDX and SGX #162

Closed imlk0 closed 1 year ago

imlk0 commented 1 year ago

We add more verifiers (sgx-ecdsa/sev-snp/sev/csv) to TDX mode, and also add tdx-ecdsa verifier to SGX mode. To implement the latter, we modified sgx_ecdsa_ocall.c and used the new APIs tee_get_supplemental_data_version_and_size() and tee_verify_quote() to support verification of both TDX and SGX with the same code.

Note that those changes does not require a higher version of the dcap library.

deps on #161