Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-122505

Investigate the AWS Nitro Secure Module

Linking RHIVOS CVEs to...Migration: Automation ...RHELPRIO AssignedTeam ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Story Story
    • Resolution: Done
    • Icon: Normal Normal
    • None
    • rhel-10.1
    • podman
    • None
    • rhel-container-tools
    • 3
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      The AWS Nitro Enclaves Nitro Secure Module (NSM) is a crucial component within the AWS Nitro Enclaves architecture, providing essential security and cryptographic capabilities to the isolated execution environments.

       

      The NSM enables cryptographic attestation, a process where an enclave can prove its identity and the integrity of its running code to a third party or service. This is achieved by generating a cryptographically signed attestation document containing details like the enclave's public key, hashes of the enclave image, and application code.

       

      The NSM also contains PCRs that can measure various amount of data for eventual attestation.

       

      The goal of this is to implement a test Rust program using the aws-nitro-enclaves-nsm-api crate to:

      • Measure some data in a PCR.
      • Lock the PCR
      • Produce an attestation document for evaluating the PCRs that were extended.
      • Verify that locked PCRs can no longer be extended after the lock occurs.

              rh-ee-jcorrent Jake Correnti
              tfanelli@redhat.com Tyler Fanelli
              Container Runtime Eng Bot Container Runtime Eng Bot
              Container Runtime Bugs Bot Container Runtime Bugs Bot
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: