Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2025-02-01 10:05:08 -05:00
Code Issues Packages Projects Releases Wiki Activity

Make RTMRs part of "aux data"

Browse Source
This commit is contained in:
flxflx 2024-11-15 11:39:27 +01:00
parent 98cabeebd5
commit d43a24b378
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
dev-docs/security-overview.md
View File

@ -79,12 +79,16 @@ Abstractly, a remote-attestation statement `R` from a CVM looks as follows:
R = Sig-CPU(<launch digest>, <auxiliary data>, <payload>) R = Sig-CPU(<launch digest>, <auxiliary data>, <payload>)
``` ```
The `payload` is controlled by the software running inside the CVM. The field `payload` is controlled by the software running inside the CVM.
In the case of a Constellation node, the `payload` is always the public key of the respective Bootstrapper running inside the CVM. In the case of a Constellation node, the `payload` is always the public key of the respective Bootstrapper running inside the CVM.
Thus, `R` can be seen as a certificate for that public key issued by the CPU. Thus, `R` can be seen as a certificate for that public key issued by the CPU.
Based on this, nodes establish attested TLS (aTLS) connections. Based on this, nodes establish attested TLS (aTLS) connections.
aTLS is used during [cluster creation](#cluster-creation) and when [growing a cluster](#cluster-growth). aTLS is used during [cluster creation](#cluster-creation) and when [growing a cluster](#cluster-growth).
The field `auxiliary data` is populated automatically by the CVM platform and, among others, includes information like CPU firmware versions.
Note that this description of `R` is highly abstract.
### Measurements ### Measurements
In the ideal case, the underlying CVM platform does not inject any of its own software into a CVM. In the ideal case, the underlying CVM platform does not inject any of its own software into a CVM.
@ -101,7 +105,7 @@ In measured boot, in general, the software components involved in the boot proce
The values of these registers are also called "runtime measurements". The values of these registers are also called "runtime measurements".
All supported CVM platforms provide TPMs to CVMs. All supported CVM platforms provide TPMs to CVMs.
Constellation nodes use these to measure their boot process. Constellation nodes use these to measure their boot process.
They include the 16 runtime measurements as `auxiliary data` in `R`. They include the 16 runtime measurements as part of `payload` in `R`. Thus, abstractly, `payload` here has the following format: `payload = <PCRs> | <bootstrapper public key>`.
On each CVM platform, runtime measurements are taken differently. On each CVM platform, runtime measurements are taken differently.
Details on this are given in the [Constellation documentation](https://docs.edgeless.systems/constellation/architecture/attestation#runtime-measurements). Details on this are given in the [Constellation documentation](https://docs.edgeless.systems/constellation/architecture/attestation#runtime-measurements).