Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update the SGX quote status verification in python #404

Open
bvavala opened this issue Feb 24, 2023 · 1 comment
Open

Update the SGX quote status verification in python #404

bvavala opened this issue Feb 24, 2023 · 1 comment
Assignees
Labels
enhancement New feature or request

Comments

@bvavala
Copy link
Member

bvavala commented Feb 24, 2023

The quote status verification in python uses hardcoded values to verify the quote (e.g., the "GROUP_OUT_OF_DATE" string).
With the updated IAS APIs, we need to handle additional flags, like those listed in the verify-report module of the crypto library.
This can be necessary particularly when working with Azure VMs.

The verify-report cpp module already implements the verification functions, also providing additional flags to make the verification pass with particular statuses (such as group out date).
Hence, it is appropriate to leverage the available swig layer to call into the cpp module for the verification, so that we have a single place where the verification is performed.

@bvavala bvavala self-assigned this Feb 24, 2023
@bvavala bvavala added the enhancement New feature or request label Feb 24, 2023
@prakashngit
Copy link
Contributor

this doesn't look like a security check, at best an optimization, may be close this issue? or even remove the code that does the local status check at the eservice.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants