Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support attestation generation #2

Open
shenkeyao opened this issue Jan 8, 2025 · 0 comments
Open

Support attestation generation #2

shenkeyao opened this issue Jan 8, 2025 · 0 comments
Assignees

Comments

@shenkeyao
Copy link
Member

shenkeyao commented Jan 8, 2025

Generate an encrypted data key using AWS KMS following https://docs.aws.amazon.com/enclaves/latest/user/flow.html#data-prep.

Copied steps from https://espresso.zulipchat.com/#narrow/channel/454753-eng-integrations/topic/OP.20Integration.20-.20Start.20AWS.20Nitro.20Enclave/near/492159477:

  • generate my AWS KMS key pair
  • launch a c8g.xlarge instance as parent instance, later we might change the type according to our needs
  • use the provided Hello Example to build the enclave image file
  • run, validate and terminate enclave
  • generate encrypted data key under my KMS key
  • get the attestation document and use the new key to decrypt the attestation document
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants