Code

Implement key synchronization.#32

Code

Merged

NullHypothesis merged 99 commits intomasterbrave/nitriding-daemon:masterfrom key-syncbrave/nitriding-daemon:key-syncCopy head branch name to clipboardSep 25, 2023

+2,587-2,144

Commits

Commits on Aug 4, 2023

• Implement mechanism for leader designation.

  NullHypothesis

  committed
  990abad

• Implement mechanism to register worker enclaves.

  NullHypothesis

  committed
  718214e

Commits on Aug 8, 2023

• Add handlers for key (re-)synchronization.

  NullHypothesis

  committed
  b19e1f7

Commits on Aug 11, 2023

• Improve key sync protocol.

  

  Philipp Winter

  committed
  e724427

• Move log message to the correct place.

  

  Philipp Winter

  committed
  904468f

• Remove debug code.

  

  Philipp Winter

  committed
  f8f6e89

• Improve debug messages.

  

  Philipp Winter

  committed
  efeeb8b

• Improve registration process.

  

  Philipp Winter

  committed
  0b35752

Commits on Aug 15, 2023

• Refactor and test key synchronization.

  

  Philipp Winter

  committed
  75c059a

• Fix proxy.go

  

  Philipp Winter

  committed
  2aa6d45

• Add crude heartbeat mechanism.

  

  Philipp Winter

  committed
  bc8eb82

• Revise heartbeat mechanism.

  

  Philipp Winter

  committed
  f656393

• Polish heartbeat mechanism.

  

  Philipp Winter

  committed
  099e2c9

Commits on Aug 16, 2023

• Make worker initiate re-synchronization.

  

  Philipp Winter

  committed
  9f444ca

• Refactoring.

  

  Philipp Winter

  committed
  c72be54

• Add scripts for testing sync outside of enclaves.

  

  Philipp Winter

  committed
  cb6b360

• Update test scripts.

  

  Philipp Winter

  committed
  060ca35

• Remove unused constant.

  

  Philipp Winter

  committed
  e9a4fb9

• Terminate if enclave keys cannot be installed.

  

  Philipp Winter

  committed
  4c79050

• Remove annoying error messages.

  

  Philipp Winter

  committed
  d306826

• Address linter error.

  

  Philipp Winter

  committed
  be940b9

• Add log message.

  

  Philipp Winter

  committed
  4cd624a

• Fix bug.

  

  Philipp Winter

  committed
  6303f03

• Actually fix bug this time.

  

  Philipp Winter

  committed
  269ec4d

• Improve test coverage.

  

  Philipp Winter

  committed
  3eb556a

• Improve log message.

  

  Philipp Winter

  committed
  ca9c01c

• Use goroutines for execution.

  

  Philipp Winter

  committed
  d403d4b

• Rename struct.

  

  Philipp Winter

  committed
  dbd88ea

• Fix capitalization.

  

  Philipp Winter

  committed
  cc0636e

• Tidy up dependencies.

  

  Philipp Winter

  committed
  0591be7

• Merge heartbeat and registration handler.

  

  Philipp Winter

  committed
  697f033

• Use self-signed certificates for tests to pass.

  

  Philipp Winter

  committed
  56a9745

• Delete unused code block.

  

  Philipp Winter

  committed
  4a83286

• Don't block on forAll.

  

  Philipp Winter

  committed
  ee82653

Commits on Aug 17, 2023

• Fix data race.

  

  Philipp Winter

  committed
  165d947

Commits on Aug 18, 2023

• Run the "designate leader" code only once.

  

  Philipp Winter

  committed
  359336b

• Make attestation handler use attester interface.

  

  Philipp Winter

  committed
  e27377f

• More refactoring and shuffling code around.

  

  Philipp Winter

  committed
  33bcf39

• Remove debug message.

  

  Philipp Winter

  committed
  d52948e

• Fix linter warning.

  

  Philipp Winter

  committed
  0557bda

• Add work-in-progress documentation.

  

  Philipp Winter

  committed
  632f83a

Commits on Aug 21, 2023

• Elaborate on key synchronization.

  

  Philipp Winter

  committed
  25f5427

• Elaborate on heartbeat mechanism.

  

  Philipp Winter

  committed
  bc27aa4

• Add installation of HTTPS certificate.

  

  Philipp Winter

  committed
  a6d22c8

Commits on Aug 22, 2023

• Shuffle variables around.

  

  Philipp Winter

  committed
  ba7b3e3

• Remove TODO item.

  

  Philipp Winter

  committed
  b3cf4c2

• Use AWS metadata service to get worker hostname.

  

  Philipp Winter

  committed
  d67f006

• Fix conditional address extraction.

  

  Philipp Winter

  committed
  b0a7b76

Commits on Aug 23, 2023

• Obtain hostname manually from IMDSv2.

  

  Philipp Winter

  committed
  fb34e56

• Add a way to determine hostname outside of enclaves.

  

  Philipp Winter

  committed
  689ab28

• Simplify getWorker.

  

  Philipp Winter

  committed
  3f80620

• Log worker's hostname.

  

  Philipp Winter

  committed
  58fb3b5

• Fix incorrect function invocation.

  

  Philipp Winter

  committed
  4ce1d08

• Remove debug message.

  

  Philipp Winter

  committed
  9fa0f61

• Make log message more descriptive.

  

  Philipp Winter

  committed
  8b769eb

• Fix unit tests.

  

  Philipp Winter

  committed
  c888027

Commits on Aug 28, 2023

• Elaborate on image IDs.

  

  Philipp Winter

  committed
  e36b808

• Use nitro attester by default.

  

  Philipp Winter

  committed
  35d6911

Commits on Aug 29, 2023

• Elaborate on security considerations.

  

  Philipp Winter

  committed
  0f42e6b

• Test leader designation via self-probing.

  

  Philipp Winter

  committed
  a1c1559

• Cleaning up previous commit.

  

  Philipp Winter

  committed
  f3f9167

• Fix deadlock and add log messages.

  

  Philipp Winter

  committed
  e609422

• Re-attempt talking to leader designation endpoint.

  

  Philipp Winter

  committed
  36ff042

Commits on Aug 30, 2023

• Raise read limit as 5K wasn't enough.

  

  Philipp Winter

  committed
  2e0fba3

• Back off for a second before re-trying.

  

  Philipp Winter

  committed
  62c3dd1

• Print differing PCR values.

  

  Philipp Winter

  committed
  72ed9c4

• Start heartbeat loop after key synchronization.

  

  Philipp Winter

  committed
  308f43e

• Ignore PCR4 when comparing PCR values.

  

  Philipp Winter

  committed
  374812b

• Dereference argument to fix bug.

  

  Philipp Winter

  committed
  8990920

• Pad public key field if unused.

  

  Philipp Winter

  committed
  d9605b0

• Fix if condition.

  

  Philipp Winter

  committed
  817cc81

• Transmit encrypted key material separately.

  Show description for aaf3c72
  

  Philipp Winter

  committed
  aaf3c72

Commits on Aug 31, 2023

• Remove unused endpoint.

  

  Philipp Winter

  committed
  6e7cc50

• Implement Darnell's suggestion for state handlers.

  

  Philipp Winter

  committed
  f3099fb

• Update tooling.

  

  Philipp Winter

  committed
  18afc7a

• Add tests for revised state handlers.

  

  Philipp Winter

  committed
  d13fb9f

• Rename helper functions for clarity.

  

  Philipp Winter

  committed
  ae0fd4c

• Add unit test.

  

  Philipp Winter

  committed
  436ed32

• Delete unused context.

  

  Philipp Winter

  committed
  277491e

• Replace context with stop channel.

  

  Philipp Winter

  committed
  193b2bd

• Add draft of HTTP API docs.

  

  Philipp Winter

  committed
  3bad177

Commits on Sep 1, 2023

• Replace status code 410 with 403.

  

  Philipp Winter

  committed
  a206598

Commits on Sep 11, 2023

• Add unit test.

  

  Philipp Winter

  committed
  2a8f019

• Clean up and delete unnecessary code.

  

  Philipp Winter

  committed
  e5245c9

• Add test and clean up code.

  

  Philipp Winter

  committed
  f66886c

• Improve clarity and remove unnecessary function calls.

  

  Philipp Winter

  committed
  2552574

• Use sync.Once and change return code after first run.

  

  Philipp Winter

  committed
  8638ab6

• Remove unused function.

  

  Philipp Winter

  committed
  fba9cb7

• Remove comment.

  

  Philipp Winter

  committed
  fe82053

• Fix comment.

  

  Philipp Winter

  committed
  2091010

• Use sync.Mutex instead.

  

  Philipp Winter

  committed
  cd09cee

• Only expose endpoint if necessary.

  

  Philipp Winter

  committed
  44487e6

• Expose Prometheus metrics for heartbeats.

  

  Philipp Winter

  committed
  138580f

• Minor improvements to clarity.

  

  Philipp Winter

  committed
  1d6f59f

• Remove unnecessary newline.

  

  Philipp Winter

  committed
  0fe0922

• Update docs to match protocol.

  

  Philipp Winter

  committed
  f1594eb

• Limit the # of bytes we're willing to read.

  

  Philipp Winter

  committed
  eb37930

Commits on Sep 25, 2023

• Register heartbeat metrics with Prometheus.

  

  Philipp Winter

  committed
  94a9d73

• Also run 'go vet' and govulncheck.

  

  Philipp Winter

  committed
  a5fd697