Skip to content

Python library for Intel SGX DCAP remote attestation

Notifications You must be signed in to change notification settings

Cosmian/intel-sgx-ra

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

80 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Intel SGX DCAP Remote Attestation library

Overview

Python library for Intel SGX DCAP remote attestation.

Installation

$ pip install intel-sgx-ra

Usage

$ sgx-ra-verify --help
usage: sgx-ra-verify [-h] [--verbose] [--mrenclave HEXDIGEST]
                     [--mrsigner HEXDIGEST]
                     (--pccs-url URL | --azure-attestation)
                     {certificate,quote} ...

Intel SGX DCAP quote verification

positional arguments:
  {certificate,quote}   sub-command help
    certificate         Remote Attestation from RA-TLS X.509 certificate
    quote               Remote Attestation of a raw SGX quote

optional arguments:
  -h, --help            show this help message and exit
  --verbose             Verbose mode
  --mrenclave HEXDIGEST
                        Expected MRENCLAVE value in SGX quote
  --mrsigner HEXDIGEST  Expected MRSIGNER value in SGX quote
  --pccs-url URL        Provisioning Certificate Cache Service URL (Intel
                        DCAP)
  --azure-attestation   Microsoft Azure Attestation Service (Azure DCAP)
$ sgx-ra-utils --help
usage: sgx-ra-utils [-h] [--verbose] {extract} ...

Intel SGX DCAP Quote tools

positional arguments:
  {extract}   sub-command help
    extract   Extract Quote from RA-TLS X.509 certificate

optional arguments:
  -h, --help  show this help message and exit
  --verbose   Verbose mode