55 questions
1
vote
0
answers
31
views
Trouble decrypting CiphertextForRecipient after KMS GenerateDataKey
I'm building a route for my go (gin) server that generates a Data Encryption Key (DEK), following the principle of zero-trust (the backend never sees the plaintext).
Right now, the client generates a ...
0
votes
1
answer
213
views
Issue with SQL Azure Secure Enclave: LIKE Clause Failing with Error
I am using Microsoft SQL Azure (RTM) - 12.0.2000.8, where I configured the secure enclave with VBS where I am using keyvalut for creating column master key. All the operators are working fine except ...
0
votes
1
answer
98
views
AWS KMS ECC keys access control
Is it in any way possible to restrict AWS KMS signing operation with a EC private key to a particular AWS Nitro Enclave? That is, make is such that only the enclave with a given PCR hash is capable/...
1
vote
1
answer
467
views
Running nitro enclaves and on Amazon EKS and getting Insufficient hugepages-2Mi on pods [closed]
I am following this article to use Nitro Enclaves on EKS. My pods giving me a warning and are stuck in a pending state.
0/2 nodes are available: 2 Insufficient aws.ec2.nitro/nitro_enclaves, 2
...
0
votes
0
answers
241
views
'failed to load enclave' in hardware mode with Intel SGX
For the past few days, following the official guide (https://gramine.readthedocs.io/en/latest/devel/building.html) I've been trying to install Gramine in my laptop (HP EliteBook 840 G3, Intel Core i7-...
1
vote
1
answer
340
views
How to decrypt the CiphertextForRecipient using the private key in the enclave?
I am trying for Decrypt API of AWS KMS from an enclave.
And In the Nitro Enclave Documentation, it was expressed that, instead of returning the plaintext ( decrypted result ) KMS response with "...
0
votes
1
answer
130
views
Apple secure enclave with RFC6979
Does Apple secure enclave support rfc6979 with P256 curve? This RFC defines a deterministic ecdsa with a deterministic k value.
THATS LINK OF THE RFC https://www.rfc-editor.org/rfc/rfc6979
I looked ...
0
votes
0
answers
304
views
SQL Server Always Encrypted w/ Secure Enclave - Key Management Strategy
I am looking into ways to build a data warehouse that would house confidential data for 1+ clients. The requirement is that our organization can never obtain access to the decrypted data. There would ...
0
votes
0
answers
81
views
Porting LUA to SGX application
I want to use Luacpp in an SGX application. For example, in the SampleEnclave application, I want to send some Lua codes to be executed securely in SGX.
I have updated the Enclave's MakeFile to make ...
2
votes
2
answers
2k
views
AWS Nitro Enclave Socket Connection to Database
I'd like to host an app that uses a database connection in an AWS Nitro enclave.
I understand that the Nitro enclave doesn't have access to a network or persistent storage, and the only way that it ...
0
votes
2
answers
242
views
Integration of Intel SGX and MYsql server
I am quite new in using Intel SGX, I have a application which uses MySql Server. How can I integrate Intel SGX with Mysql server and how the architecture could be?
0
votes
2
answers
598
views
Run arbitrary app in a secure enclave (SGX)
I want my C++ application to launch an arbitrary app (let's say a python script through a python interpreter) inside a secure enclave (Intel SGX). Is that even possible?
The steps are the following.
...
0
votes
1
answer
172
views
How to prove the data are generated or calculated by TEE (e.g., Intel SGX)?
Suppose I receive data from Bob and he says the data are generated or calculated by TEE (e.g., Intel SGX).
Is there any method, TEE, or auxiliary information like zero-knowledge in cryptography that ...
0
votes
0
answers
89
views
In this sgx-app,am I make some mistakes about new short[]?
I'm running an app with sgx. It's memory usage is less than 128M, I'm sure about that.
0x752EEB22 (KernelBase.dll)处(位于 test-sgx-align.exe 中)引发的异常: 0xA1A01EC1 (参数:0x13B1CDA8)。
0x79021168 (sgx_urts.dll)...
0
votes
2
answers
655
views
Can we prevent EC2 instance from accessing the plain text data when using the AWS Nitro Enclave for encryption?
I am working on a project where the data that comes from the customer through a REST API should be encrypted before sending it to the database. To do that, we need to use AWS Nitro Enclave to do the ...