Skip to content
This repository has been archived by the owner on May 9, 2022. It is now read-only.

Add an ECALL for issuing execution tokens #38

Closed
2 of 6 tasks
longtomjr opened this issue May 4, 2021 · 0 comments · Fixed by #99
Closed
2 of 6 tasks

Add an ECALL for issuing execution tokens #38

longtomjr opened this issue May 4, 2021 · 0 comments · Fixed by #99
Assignees
Labels
M: auth enclave Module: Authorisation enclave (rtc_auth_enclave)

Comments

@longtomjr
Copy link
Collaborator

longtomjr commented May 4, 2021

  • Add ECALL that takes a UUID and access-key along with the token details (use count and binary hash) -> Encrypted payload
  • Decrypt the payload
  • Lookup UUID (using the state management abstraction) and verify that (depends on: Add an ECALL to save access-key hash and UUID for a data set #37):
    1. The UUID exists
    2. The hash saved alongside the UUID correspond to the hash of the provided access-key
  • Create a token and sign it in some way (using an mrenclave+mrsigner unique key)
    • Note: Some design for this is still needed
  • Save the token (or some subset) (under the UUID) using the state abstraction
  • Encrypt the token for the client and return it

Blocks: #74

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
M: auth enclave Module: Authorisation enclave (rtc_auth_enclave)
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants