-
Story
-
Resolution: Done
-
Normal
-
None
-
rhel-10.1
-
None
-
rhel-container-tools
-
3
-
False
-
False
-
-
None
-
None
-
None
-
None
-
Unspecified
-
Unspecified
-
Unspecified
-
None
The AWS Nitro Enclaves Nitro Secure Module (NSM) is a crucial component within the AWS Nitro Enclaves architecture, providing essential security and cryptographic capabilities to the isolated execution environments.
The NSM enables cryptographic attestation, a process where an enclave can prove its identity and the integrity of its running code to a third party or service. This is achieved by generating a cryptographically signed attestation document containing details like the enclave's public key, hashes of the enclave image, and application code.
The NSM also contains PCRs that can measure various amount of data for eventual attestation.
The goal of this is to implement a test Rust program using the aws-nitro-enclaves-nsm-api crate to:
- Measure some data in a PCR.
- Lock the PCR
- Produce an attestation document for evaluating the PCRs that were extended.
- Verify that locked PCRs can no longer be extended after the lock occurs.