search

lf-edge / adam

Adam talks to EVE
https://www.lfedge.org/projects/eve/
Apache License 2.0
63 stars 32 forks source link

storage keys management #103

Closed giggsoff closed 2 years ago

giggsoff commented 2 years ago

Implementation of ZAttestReqType_Z_ATTEST_REQ_TYPE_STORE_KEYS request and adding storage keys to quote response. Those changes required for TPM-enabled EVE to properly work with encrypted vault.

giggsoff commented 2 years ago

Strange, cannot add reviewers... cc @deitch @eriknordmark

deitch commented 2 years ago

@giggsoff in terms of structure, these are fine. It just adds another endpoint and one more chunk of data to store.

I don't actually get what we are storing, though. What keys are we storing on the device?

giggsoff commented 2 years ago

It is not about new endpoint. I found the problem with decryption of vault when tried to run vTPM EVE with Adam. As described here EVE sends storage key to the controller. And controller must respond it to EVE on successful attestation.