Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Investigate support for AMD SEV-SNP attestation #4035

Closed
4 tasks done
achamayou opened this issue Jul 14, 2022 · 1 comment
Closed
4 tasks done

Investigate support for AMD SEV-SNP attestation #4035

achamayou opened this issue Jul 14, 2022 · 1 comment
Assignees
Milestone

Comments

@achamayou
Copy link
Member

achamayou commented Jul 14, 2022

CCF should support requesting, and verifying SEV-SNP attestations.

Work Breakdown:

Attestation verification in standalone library (similar to OpenEnclave functionality)

  • Get a scriptable way to get and connect to an ACI container
  • Get quotes from the SEV-SNP platform
  • Parse quotes for verification
  • Write function to verify the quote (using AMD root of trust and certificate chain)

Follow-up work has been broken down in #4068, #4069, #4070, #4071, #4072.

@achamayou achamayou added the S label Jul 25, 2022
@achamayou achamayou changed the title Support for AMD SEV-SNP attestation Investigate support for AMD SEV-SNP attestation Jul 25, 2022
@shokouedamsr shokouedamsr added this to the 3.x milestone Jul 25, 2022
@jumaffre
Copy link
Contributor

jumaffre commented Aug 4, 2022

I believe this is effectively done and follow-up tickets have been created to cover the work necessary to complete AMD SEV-SNP support for CCF.

@jumaffre jumaffre closed this as completed Aug 4, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants