Skip to content

README.md

Latest commit

 

History

History
47 lines (37 loc) · 1.11 KB

README.md

File metadata and controls

47 lines (37 loc) · 1.11 KB

Intel SGX/TDX Attester

A minimalistic tool that does those things:

  • Obtains an SGX DCAP quote (a.k.a. remote attestation), with the specified challenge embedded as report data
  • Verifies an arbitrary quote, prints quote measurements, and fetches the unique platform identifier

How to use

Generate a quote

sudo docker run \
    --device /dev/sgx_enclave \
    --device /dev/sgx_provision \
    --rm \
    ghcr.io/proofofcloud/attester@sha256:2ae052dd244ab12880bf7a77b6580a289761d10bb19764310e4c44bbd8c5f14c \
    get beefdeed

(replace _beefdeed_ with your challenge)

Output

The output of the get command contains the following:

  • Raw quote
  • Quote verification report
  • PPID of the machine

Verify a quote

./verify.sh <attester output file> <expected challenge>

Expected output:

quote_valid: yes|no
challenge_match: yes|no
machine_id: <machineID extracted from quote>

Alternatively, run the quote verification directly:

docker run \
    --rm \
    ghcr.io/proofofcloud/attester@sha256:2ae052dd244ab12880bf7a77b6580a289761d10bb19764310e4c44bbd8c5f14c \
    check "$QUOTE"