mirror of
https://github.com/corda/corda.git
synced 2024-12-28 00:38:55 +00:00
Add noop-enclave
This commit is contained in:
Andras Slemmer
parent
759cb6da04
commit
3d8581a946
111
sgx-jvm/noop-enclave/CMakeLists.txt
Normal file
111
sgx-jvm/noop-enclave/CMakeLists.txt
Normal file
@ -0,0 +1,111 @@
|
|||||||
|
cmake_minimum_required(VERSION 3.5)
|
||||||
|
|
||||||
|
set(SGX_SDK ${CMAKE_CURRENT_SOURCE_DIR}/../linux-sgx)
|
||||||
|
set(SGX_LIBRARY_PATH ${SGX_SDK}/build/linux)
|
||||||
|
set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} -fvisibility=hidden -fpie -fstack-protector")
|
||||||
|
set(SGX_SIGN_TOOL ${SGX_SDK}/build/linux/sgx_sign)
|
||||||
|
set(ENCLAVE_UNSIGNED_OUTPUT_LIB noop_enclave.so)
|
||||||
|
set(ENCLAVE_BLOB_TO_SIGN noop_enclave_blob_to_sign.bin)
|
||||||
|
set(ENCLAVE_SIGNED_OUTPUT_LIB noop_enclave.signed.so)
|
||||||
|
set(PRIVATE_KEY_NAME selfsigning.pem)
|
||||||
|
set(PUBLIC_KEY_NAME selfsigning.public.pem)
|
||||||
|
set(NOOP_ENCLAVE noop_enclave_objects)
|
||||||
|
set(SGX_SDK_INCLUDE ${SGX_SDK}/common/inc)
|
||||||
|
set(GENERATED_RPC_DIR ${CMAKE_CURRENT_BINARY_DIR}/rpc)
|
||||||
|
set(ENCLAVE_SIGNATURE noop_enclave.signature.sha256)
|
||||||
|
|
||||||
|
set(GENERATED_EDL_FILES ${GENERATED_RPC_DIR}/empty_t.c ${GENERATED_RPC_DIR}/empty_t.h ${GENERATED_RPC_DIR}/empty_u.c ${GENERATED_RPC_DIR}/empty_u.h)
|
||||||
|
add_custom_command(
|
||||||
|
OUTPUT ${GENERATED_EDL_FILES}
|
||||||
|
COMMAND edger8r --search-path ${CMAKE_CURRENT_SOURCE_DIR}/src --search-path ${SGX_SDK_INCLUDE} --trusted-dir ${GENERATED_RPC_DIR} --untrusted-dir ${GENERATED_RPC_DIR} ${CMAKE_CURRENT_SOURCE_DIR}/src/empty.edl
|
||||||
|
DEPENDS ${CMAKE_CURRENT_SOURCE_DIR}/src/empty.edl ${SGX_LIBRARY_PATH}/sgx_edger8r ${SGX_SDK_INCLUDE}
|
||||||
|
)
|
||||||
|
set_source_files_properties(${GENERATED_EDL_FILES} PROPERTIES GENERATED TRUE)
|
||||||
|
add_custom_target(
|
||||||
|
GENERATED_EDL
|
||||||
|
DEPENDS ${GENERATED_EDL_FILES}
|
||||||
|
)
|
||||||
|
|
||||||
|
add_library(${NOOP_ENCLAVE} ${CMAKE_CURRENT_SOURCE_DIR}/src/noop_enclave.cpp ${GENERATED_RPC_DIR}/empty_t.c)
|
||||||
|
add_dependencies(${NOOP_ENCLAVE} GENERATED_EDL)
|
||||||
|
set_property(TARGET ${NOOP_ENCLAVE} PROPERTY POSITION_INDEPENDENT_CODE ON)
|
||||||
|
target_include_directories(${NOOP_ENCLAVE} PUBLIC ${SGX_SDK_INCLUDE} ${SGX_SDK_INCLUDE}/tlibc ${GENERATED_RPC_DIR})
|
||||||
|
target_compile_options(${NOOP_ENCLAVE} PUBLIC -nostdinc)
|
||||||
|
|
||||||
|
add_executable(edger8r IMPORTED)
|
||||||
|
set_target_properties(edger8r PROPERTIES IMPORTED_LOCATION ${SGX_LIBRARY_PATH}/sgx_edger8r)
|
||||||
|
|
||||||
|
if(SGX_USE_HARDWARE)
|
||||||
|
set(TRTS_LIB "sgx_trts")
|
||||||
|
set(SGX_SERVICE_LIB "sgx_tservice")
|
||||||
|
else()
|
||||||
|
set(TRTS_LIB "sgx_trts_sim")
|
||||||
|
set(SGX_SERVICE_LIB "sgx_tservice_sim")
|
||||||
|
endif()
|
||||||
|
|
||||||
|
set(ENCLAVE_LINKER_FLAGS
|
||||||
|
"-Wl,--no-undefined"
|
||||||
|
"-nostdlib"
|
||||||
|
"-nodefaultlibs"
|
||||||
|
"-nostartfiles"
|
||||||
|
"-L${SGX_LIBRARY_PATH}"
|
||||||
|
"-Wl,--whole-archive"
|
||||||
|
"-l${TRTS_LIB}"
|
||||||
|
"-Wl,--no-whole-archive"
|
||||||
|
"-Wl,--start-group"
|
||||||
|
"lib${NOOP_ENCLAVE}.a"
|
||||||
|
"-lsgx_tstdc"
|
||||||
|
"-lsgx_tstdcxx"
|
||||||
|
"-lsgx_tcrypto"
|
||||||
|
"-l${SGX_SERVICE_LIB}"
|
||||||
|
"-Wl,--end-group"
|
||||||
|
"-Wl,-Bstatic"
|
||||||
|
"-Wl,-Bsymbolic"
|
||||||
|
"-Wl,--no-undefined"
|
||||||
|
"-Wl,-pie,-eenclave_entry"
|
||||||
|
"-Wl,--export-dynamic"
|
||||||
|
"-Wl,--defsym,__ImageBase=0"
|
||||||
|
"-Wl,--version-script=${CMAKE_CURRENT_SOURCE_DIR}/linkerscript.lds"
|
||||||
|
)
|
||||||
|
|
||||||
|
add_custom_command(
|
||||||
|
OUTPUT ${CMAKE_CURRENT_BINARY_DIR}/${ENCLAVE_UNSIGNED_OUTPUT_LIB}
|
||||||
|
COMMAND ${CMAKE_CXX_COMPILER} -o ${ENCLAVE_UNSIGNED_OUTPUT_LIB} ${ENCLAVE_LINKER_FLAGS}
|
||||||
|
DEPENDS ${NOOP_ENCLAVE} ${SGX_LIBRARY_PATH}
|
||||||
|
)
|
||||||
|
|
||||||
|
add_executable(sgx_sign IMPORTED)
|
||||||
|
set_target_properties(sgx_sign PROPERTIES IMPORTED_LOCATION ${SGX_SIGN_TOOL})
|
||||||
|
|
||||||
|
# add_custom_command(
|
||||||
|
# OUTPUT ${CMAKE_CURRENT_BINARY_DIR}/${ENCLAVE_SIGNED_OUTPUT_LIB}
|
||||||
|
# COMMAND sgx_sign sign -key ${CMAKE_CURRENT_SOURCE_DIR}/${PRIVATE_KEY_NAME} -enclave ${CMAKE_CURRENT_BINARY_DIR}/${ENCLAVE_UNSIGNED_OUTPUT_LIB} -out ${CMAKE_CURRENT_BINARY_DIR}/${ENCLAVE_SIGNED_OUTPUT_LIB} -config ${CMAKE_CURRENT_SOURCE_DIR}/enclave.xml
|
||||||
|
# DEPENDS ${CMAKE_CURRENT_BINARY_DIR}/${ENCLAVE_UNSIGNED_OUTPUT_LIB} ${CMAKE_CURRENT_SOURCE_DIR}/${PRIVATE_KEY_NAME} ${CMAKE_CURRENT_SOURCE_DIR}/enclave.xml
|
||||||
|
# )
|
||||||
|
|
||||||
|
add_custom_command(
|
||||||
|
OUTPUT ${CMAKE_CURRENT_BINARY_DIR}/${ENCLAVE_BLOB_TO_SIGN}
|
||||||
|
COMMAND sgx_sign gendata -enclave ${CMAKE_CURRENT_BINARY_DIR}/${ENCLAVE_UNSIGNED_OUTPUT_LIB} -out ${CMAKE_CURRENT_BINARY_DIR}/${ENCLAVE_BLOB_TO_SIGN} -config ${CMAKE_CURRENT_SOURCE_DIR}/enclave.xml
|
||||||
|
DEPENDS ${CMAKE_CURRENT_BINARY_DIR}/${ENCLAVE_UNSIGNED_OUTPUT_LIB}
|
||||||
|
)
|
||||||
|
|
||||||
|
# TODO: replace with getting the pubkey from HSM
|
||||||
|
add_custom_command(
|
||||||
|
OUTPUT ${CMAKE_CURRENT_BINARY_DIR}/${PUBLIC_KEY_NAME}
|
||||||
|
COMMAND openssl rsa -in ${CMAKE_CURRENT_SOURCE_DIR}/${PRIVATE_KEY_NAME} -pubout -out ${CMAKE_CURRENT_BINARY_DIR}/${PUBLIC_KEY_NAME}
|
||||||
|
)
|
||||||
|
|
||||||
|
# TODO: replace with signing on HSM
|
||||||
|
add_custom_command(
|
||||||
|
OUTPUT ${CMAKE_CURRENT_BINARY_DIR}/${ENCLAVE_SIGNATURE}
|
||||||
|
COMMAND openssl dgst -sha256 -sign ${CMAKE_CURRENT_SOURCE_DIR}/${PRIVATE_KEY_NAME} -out ${CMAKE_CURRENT_BINARY_DIR}/${ENCLAVE_SIGNATURE} ${CMAKE_CURRENT_BINARY_DIR}/${ENCLAVE_BLOB_TO_SIGN}
|
||||||
|
DEPENDS ${CMAKE_CURRENT_BINARY_DIR}/${ENCLAVE_BLOB_TO_SIGN}
|
||||||
|
)
|
||||||
|
|
||||||
|
add_custom_command(
|
||||||
|
OUTPUT ${CMAKE_CURRENT_BINARY_DIR}/${ENCLAVE_SIGNED_OUTPUT_LIB}
|
||||||
|
COMMAND sgx_sign catsig -enclave ${CMAKE_CURRENT_BINARY_DIR}/${ENCLAVE_UNSIGNED_OUTPUT_LIB} -key ${CMAKE_CURRENT_BINARY_DIR}/${PUBLIC_KEY_NAME} -sig ${CMAKE_CURRENT_BINARY_DIR}/${ENCLAVE_SIGNATURE} -unsigned ${CMAKE_CURRENT_BINARY_DIR}/${ENCLAVE_BLOB_TO_SIGN} -config ${CMAKE_CURRENT_SOURCE_DIR}/enclave.xml -out ${CMAKE_CURRENT_BINARY_DIR}/${ENCLAVE_SIGNED_OUTPUT_LIB}
|
||||||
|
DEPENDS ${CMAKE_CURRENT_BINARY_DIR}/${ENCLAVE_SIGNATURE} ${CMAKE_CURRENT_BINARY_DIR}/${PUBLIC_KEY_NAME}
|
||||||
|
)
|
||||||
|
|
||||||
|
add_custom_target(noop-enclave ALL DEPENDS ${CMAKE_CURRENT_BINARY_DIR}/${ENCLAVE_SIGNED_OUTPUT_LIB})
|
||||||
14
sgx-jvm/noop-enclave/Makefile
Normal file
14
sgx-jvm/noop-enclave/Makefile
Normal file
@ -0,0 +1,14 @@
|
|||||||
|
.PHONY: all
|
||||||
|
all: build/noop-enclave.so
|
||||||
|
|
||||||
|
build:
|
||||||
|
mkdir -p build
|
||||||
|
|
||||||
|
build/Makefile: | build
|
||||||
|
cd build/ && cmake ..
|
||||||
|
|
||||||
|
build/noop-enclave.so: build/Makefile
|
||||||
|
$(MAKE) -C $(<D) VERBOSE=1
|
||||||
|
|
||||||
|
clean:
|
||||||
|
rm -rf build
|
||||||
12
sgx-jvm/noop-enclave/enclave.xml
Normal file
12
sgx-jvm/noop-enclave/enclave.xml
Normal file
@ -0,0 +1,12 @@
|
|||||||
|
<EnclaveConfiguration>
|
||||||
|
<ProdID>0</ProdID>
|
||||||
|
<ISVSVN>0</ISVSVN>
|
||||||
|
<StackMaxSize>0x280000</StackMaxSize>
|
||||||
|
<HeapMaxSize>0xFF00000</HeapMaxSize>
|
||||||
|
<HeapExecutable>1</HeapExecutable>
|
||||||
|
<TCSNum>10</TCSNum>
|
||||||
|
<TCSPolicy>1</TCSPolicy>
|
||||||
|
<DisableDebug>0</DisableDebug>
|
||||||
|
<MiscSelect>0</MiscSelect>
|
||||||
|
<MiscMask>0xFFFFFFFF</MiscMask>
|
||||||
|
</EnclaveConfiguration>
|
||||||
9
sgx-jvm/noop-enclave/linkerscript.lds
Normal file
9
sgx-jvm/noop-enclave/linkerscript.lds
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
noop_enclave.so
|
||||||
|
{
|
||||||
|
global:
|
||||||
|
g_global_data_sim;
|
||||||
|
g_global_data;
|
||||||
|
enclave_entry;
|
||||||
|
local:
|
||||||
|
*;
|
||||||
|
};
|
||||||
39
sgx-jvm/noop-enclave/selfsigning.pem
Normal file
39
sgx-jvm/noop-enclave/selfsigning.pem
Normal file
@ -0,0 +1,39 @@
|
|||||||
|
-----BEGIN RSA PRIVATE KEY-----
|
||||||
|
MIIG4wIBAAKCAYEA0WN8oK1vGpJDTt81rc5csT5umw1rIkiymw8c9v5J1Yn+tXNd
|
||||||
|
GuaAqKj/xlbOtO4GjCvhOTsZnI0kklchrb4qYVs4SrLRecHjrwdACnwhgF/mkuMa
|
||||||
|
D9eOhNwgoVQTOsuLF7lHdUEN429Q9ER81S3wuEpOlQgU81Qiyi3UHVpmvxqoelzB
|
||||||
|
6ubDYWxCBGKpyGNflxcWE7Uic4Kp6S3b4gblRjmnuRipTV6aHh4vlKR69gNhGZst
|
||||||
|
LO5L/bqMb+kGKTbR537ouq0R8nfkhUGroP62UPkg7Uq0BktAMdo1pAJlKC2Rnzyq
|
||||||
|
kc3+05KWl+NSpEXN23BfPEL/Bx3AQ1lu0KlAuLTtT4zBkWqnAbo4UiP6/v+/o5L9
|
||||||
|
RFu7oSQODTIrnfed7ojOll9SBxaG8jlXKx/o/ePoYfyDegzFyX1MkMY0fUrg8Li3
|
||||||
|
CCzcDfPExl4r1gYEpVjACBBO8mBOsK3KSO6THm92bA7/alAEg7a5pTn/8NYwI6xH
|
||||||
|
dLlGizJ6idIYWervAgEDAoIBgQCLl6hrHkoRtteJ6iPJND3LfvRnXkdsMHcSChNP
|
||||||
|
VDE5BqnOTOi8masbG1Uu5InN9ARdcpYmJ2ZoXhhhj2vJKXGWPNAxzIumgUJ0r4AG
|
||||||
|
/Wuq6pm3QhFf5Qmt6BXA4rd8h7IP0NpOK16Xn4tNgv3jc/XQMYm4sA33jWyGyTgT
|
||||||
|
kZnUvHBRkyvx7yzrnYFYQcaFl5UPZLlieMGiVxvwyT1BWe4u0Rp7ZcYzlGa+vspj
|
||||||
|
GFH5V5YREh4d9DKpJwhKm1lwzzVlnIjerY9e7hIlM5R54R4lWb+C4+LF/mwHL8eU
|
||||||
|
Kp5EWno6+Hlr2TAnqLmZTunOG2uqfmJTvcP7G3KBTKd4WCk5IXYsJkIJBIzadp1F
|
||||||
|
mgzTTHe65nspGKaLQZpdyzecR/JWRjgu/Z9oDkDCUThHBu80Qr3dM+/R9OdanP4S
|
||||||
|
G3d3EjZKN6L151YOH/G5B1PiraX2f9BzZ9loP4OKvf103FCgg0z9sCb0j7n+g53l
|
||||||
|
xdy8eJ06WiSaV679lTp9AO4ErlsCgcEA6izSkT/2N2KPTqyEfEka7MHLtwp80Q4M
|
||||||
|
aK7OVR92bj70OSbtkwi5SunjBgoloAJhw3INq9c2Coz9/HJduviGVNBZWTOavOPf
|
||||||
|
NXtBIAPwDwyyxdli5zQP/s+M0Zu+LML3chMSIwDJHRtY3iE6ycIhW1KBqF2VoIVJ
|
||||||
|
jjRzw/t+wZqAE6Jmv/jZpyZ+pJuOUkPumELKfzpQzXuzJ+pMBCSH0DgI3LIu3ZLB
|
||||||
|
jD5wNKHvgBRX7Qtw92fKG/wQKhUDK8gFAoHBAOTnSNtoxKywOf7HyG3j7iwwtfHq
|
||||||
|
Yww/kb5ju/CjAVNm5g2hBtz/fU0rnSvizk8aSphAvhLPIwPnloT0FeEsfI4yYrQf
|
||||||
|
w8b/9ISNC0m497MAWUVf4Z+CsdFyGa7lmgbIuvsMaCziGc3lzPCeR/bTYNQtSe3R
|
||||||
|
Bh6YITNdW7GhgokVD23C29dZAVGdW4w3n6+9nRtWPNu6OAiFVjimghV/kl1yehLU
|
||||||
|
lh3lq/my3JfvRVYM7F8Zn5XN9fLWkqQ7sCcdYwKBwQCcHeG2KqQk7F+JyFhS22dI
|
||||||
|
gTJ6Bv3gtAhFyd7jak70KfgmGfO3WyYx8UIEBsPAAZaCTAkdOiQHCKlS9uknUFmN
|
||||||
|
4DuQzRHTQpTOUitqrUq0syHZO5dEzV//NQiLvSlzLKT2t2FsqzC+Ejs+wNHb1sDn
|
||||||
|
jFZwPmPAWNu0IvfX/P8rvFVibER/+zvExFRtvQmMLUm61zGqJuCI/SIanDKtba/g
|
||||||
|
JVs9zB8+YdZdfvV4a/UADY/zXPX6RTFn/WAcDgIdMAMCgcEAmJowkkXYcyAmqdqF
|
||||||
|
npf0HXXOoUbsstUL1EJ9SxdWN5nus8CvPf+o3h0Tcpc0NLwxutXUDIoXV++5rfgO
|
||||||
|
lh2oXsxBzWqChKqjAwiyMSX6d1WQ2OqWalchNkwRH0O8BIXR/LLwHewRM+6IoGmF
|
||||||
|
TzeV4sjb8+CuvxAWIj49IRZXBg4KSSySj5Cri749CCUVH9O+Ejl959F6sFjkJcRW
|
||||||
|
uP+26Pb8DI25aUPH+8yTD/TY5AidlLu/uTP5TI8MbX0gGhOXAoHAB0s/g7QLEiuf
|
||||||
|
KsbqhnH+6VWgjAMrlBI84lRM53UeM7YA2ww9np7lMMqGfHQPfWKKwMb3sTjRP5m0
|
||||||
|
BWUpmP4Rivswhj1or8+7X7G2R4IYI34PjTMDlmsrihj4mVfpsi8eDhLEvBKDo+Nl
|
||||||
|
W/PImwd8eJtQLGw+dlFjnKbNFAUz42vcvDpK5jz1pfoXITzVvZNCoDFE7SUlzlJe
|
||||||
|
5dm68k56jbnvHP7gU+fCnxHlBbscWOE5HA17lA5tpJ1JUDrVea/4
|
||||||
|
-----END RSA PRIVATE KEY-----
|
||||||
5
sgx-jvm/noop-enclave/src/empty.edl
Normal file
5
sgx-jvm/noop-enclave/src/empty.edl
Normal file
@ -0,0 +1,5 @@
|
|||||||
|
enclave {
|
||||||
|
trusted {
|
||||||
|
public void noop();
|
||||||
|
};
|
||||||
|
};
|
||||||
3
sgx-jvm/noop-enclave/src/noop_enclave.cpp
Normal file
3
sgx-jvm/noop-enclave/src/noop_enclave.cpp
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
extern "C" {
|
||||||
|
void noop() {}
|
||||||
|
}
|
||||||
Loading…
Reference in New Issue
Block a user