Comments (5)
Does openssl support SM9?
from ehsm.
Does openssl support SM9?
it doesn't. But SM9 is implemented in GmSSL https://github.com/guanzhi/GmSSL. Should we use GmSSL in eHSM? @yang8621
from ehsm.
eHSM depends on a customized openssl: https://github.com/intel/intel-sgx-ssl/tree/support_tls.
It's forked from openssl but provides two functions:
- SGX customization, aka syscall handling. 2. SGX-based attested TLS.
eHSM is not a libOS-based solution, so that Gmssl cannot be used directly.
SM9 has values in various use cases, as you mentioned. I will also do some homework on it. But currently, there are gaps to support it.
from ehsm.
Thanks for your reply. If I want to do this work, could you give me some advice? I'm a newbie for Intel SGX.
from ehsm.
With pleasure. The 1st thing is to build gmssl into sgx enclave.
You can refer to https://github.com/intel/linux-sgx/blob/master/SampleCode/SampleEnclave/Makefile, especially focus on the Enclave settings. Standard std files cannot be used, instead, only SGX supported headers can be used. SGX removes all syscall support inside enclave, so that you may encounter many compiling errors like get time, IO, or even printf() etc. You can either disable the unused functions, or rewrite the function by SGX SDK: send sgx ocall to the ROS.
from ehsm.
Related Issues (20)
- Bug: RSA key can't work
- Bug: memory leak HOT 1
- support CMK rotation HOT 2
- Support Intel Trust Authority Attestation
- Bugs found in ehsm HOT 23
- Upgrade to Openssl 3
- Trouble with setting environment of quick start HOT 16
- move the HMAC verification into core enclave
- support restful request with attestation token
- support cmk rotation
- unify the input params of digest for sign operation
- support client sdk for popular programming language(go, rust, python, java, scala, etc)
- Feature Request: Support WebKMS standard HOT 2
- ehsm_ksm_service application running on single mode stop during the generateQuote operation HOT 2
- Is there some bytes limit in Encrypt or AsymmetricEncrypt? HOT 4
- Bug: padding is returned as part of plaintext in the SM4_CBC decryption HOT 2
- Bug: Internal server exception when listing secrets with empty description
- ehsm_base
- [eHSM-KMS] How is the remote attestation realized? HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ehsm.