Attestation of public keys to authenticate Keyfork shard requests #23

New Issue

Open

opened 2024-01-25 06:32:54 +00:00 by ryan · 1 comment

ryan commented

2024-01-25 06:32:54 +00:00

Owner

Target: Keyfork headless enclave

Sign public keys using an attestation certificate known by shardholders, whose private key is only accessible in the enclave.

Target: Keyfork headless enclave Sign public keys using an attestation certificate known by shardholders, whose private key is only accessible in the enclave.

ryan commented

2024-02-02 09:04:52 +00:00

Author

Owner

Generate ephemeral keys using TPM2 API, have operators perform attestation when they generate the QR code to use for airgap machine.

NOTE: attested ephemeral key replay attacks are not a concern as the TPM is trusted to not leak private key data.

Generate ephemeral keys using TPM2 API, have operators perform attestation when they generate the QR code to use for airgap machine. NOTE: attested ephemeral key replay attacks are not a concern as the TPM is trusted to not leak private key data.