Co-authored-by: hu55a1n1 <sufialhussaini@gmail.com>

2024-08-13 15:31:10 +02:00

1.2 KiB

Raw Blame History

CosmWasm SGX TcbInfo Smart Contract

This smart contract facilitates the storage and verification of TcbInfos for Intel SGX. The contract ensures that TcbInfos are kept up-to-date so other contracts can query the latest TcbInfo state using the quote's fmspc during remote attestation verification to ensure the attesting enclave setup is up-to-date.

Overview

The contract provides the following functionalities:

Instantiate: Initialize the contract with a root certificate.
Execute: Store and verify TcbInfo along with the provided certificate and optional timestamp.
Query: Retrieve the latest TcbInfo using the FMSPC.

Usage (with wasmd)

Submit a new TcbInfo for a specific fmspc

export EXECUTE='{
  "tcb_info": "{\"tcbInfo\":{ /* ... */ },\"signature\":\"647bac99371750892415557b838237839e52b02afe027a43322fe661f4a1a693b04a82717120d74bccf2b3787bf7e9ecbe44caa06e6e532b7a68a21b2765663d\"}
  "certificate": "-----BEGIN CERTIFICATE-----\\n /* ... */ \\n-----END CERTIFICATE-----"
}'
wasmd tx wasm execute "$CONTRACT" "$EXECUTE" --from alice --chain-id testing -y

Query the latest TcbInfo by fmspc

wasmd query wasm contract-state smart "$CONTRACT" '{"get_tcb_info": {"fmspc": "00906ED50000"}}'

1.2 KiB Raw Blame History

CosmWasm SGX TcbInfo Smart Contract

Overview

Usage (with wasmd)

1.2 KiB

Raw Blame History