SNP Validation

[platten]

No description provided.

[haraldh]

This should be checked against a configurable value. It is the hash of the SNP author key.

        // Check fields not set by Enarx
        for value in report.body.author_key_digest {
            if value != 0 {
                return Err(anyhow!(
                    "snp report author_key_digest field not set by Enarx"
                ));
            }
        }

Also this is the hash of the signing key, signed with the author key and should be tested against a blacklist.

        for value in report.body.id_key_digest {
            if value != 0 {
                return Err(anyhow!("snp report id_key_digest field not set by Enarx"));
            }
        }

[haraldh]

Also this security version number should be checked, that it is not lower than a configured value.

        if report.body.guest_svn != 0 {
            return Err(anyhow!("snp report guest_svn field not set by Enarx"));
        }