SGX Validation

[platten]

No description provided.

[haraldh]

Besides checking:

            let hash = Sha256::digest(&cri.public_key.to_vec()?);
            if hash.as_slice() != &rpt.reportdata[..hash.as_slice().len()] {
                return Err(anyhow!("sgx report data is invalid"));
            }

only this check is necessary:

            if rpt.mrenclave != HASH_OF_SGX_SIGNING_KEY_PROVIDED_BY_CONFIG {
                return Err(anyhow!("untrusted enarx runtime"));
            }

The other fields are mostly checked by the SGX firmware already.

Maybe these could be checked also, if they >= a configured value.

            if rpt.cpusvn != [0u8; 16] {
                return Err(anyhow!("untrusted cpu"));
            }

            if rpt.enclave_security_version() < u16::MAX {
                return Err(anyhow!("untrusted enclave"));
            }