inclavare-containers / rats-tls

RATS architecture based TLS using librats
31 stars 33 forks source link

Move the validation of hmac of the PEK and chipId to attester #182

Closed wojiaohanliyang closed 1 year ago

wojiaohanliyang commented 1 year ago

This pr consists of 2 commits. The commit (06e8a28 rats-tls: csv: validate the hmac of PEK and ChipId in attester) move the validation of hmac of the PEK and chipId to attester. The commit (91491af attester/csv: Check the mnonce of attestation report to avoid replay attack from other entities) perform a check on mnonce after attester get attestation evidence to prevent replay attack .

wojiaohanliyang commented 1 year ago

@haosanzi