@@ -16,36 +16,38 @@ The following repos will be used:
16
16
17
17
* Islet: https://github.com/islet-project/islet that provides:
18
18
19
- * the whole SW/FW stack and scripts for running the emulated environment under the FVP
20
- * Islet HES https://github.com/islet-project/islet/tree/main/hes
21
- * kvmtool-rim-measurer from https://github.com/islet-project/islet/tree/main/third-party/
22
-
23
- * Islet Remote Attestation: https://github.com/islet-project/remote-attestation that provides:
24
-
25
- * rocli: https://github.com/islet-project/remote-attestation/tree/main/tools/rocli
26
- Tool for provisioning reference token and CPAK to the Veraison services.
27
- * realm-verifier: https://github.com/islet-project/remote-attestation/tree/main/lib/realm-verifier
28
- A library for veryfing RIM and REMs with reference values.
29
- * ratls: https://github.com/islet-project/remote-attestation/tree/main/lib/ratls
19
+ * the whole SW/FW stack and scripts for running the emulated environment under the FVP
20
+ * Islet HES https://github.com/islet-project/islet/tree/main/hes
21
+ * kvmtool-rim-measurer from https://github.com/islet-project/islet/tree/main/third-party/
22
+
23
+ * Various miscelanous tools and libraries for Remote Attestation
24
+
25
+ * rust-rsi: https://github.com/islet-project/rust-rsi
26
+ A library implementing token and RSI related functionalities (fetching, parsing).
27
+ * rsictl: https://github.com/islet-project/rsictl
28
+ Tool for performing RSI operations from user space.
29
+ * rocli: https://github.com/islet-project/rocli
30
+ Tool for provisioning reference token and CPAK to the Veraison services.
31
+ * ratls: https://github.com/islet-project/ratls
30
32
A library implementing RaTLS protocol for attestation purposes.
31
- * rust-rsi: https://github.com/islet-project/remote-attestation/tree/main/lib/rust-rsi
32
- A library implementing token and RSI related functionalities (fetching, parsing).
33
+ * realm-verifier: https://github.com/islet-project/realm-verifier
34
+ A library for verifying RIM and REMs with reference values.
35
+ * veraison-verifier: https://github.com/islet-project/veraison-verifier
36
+ A library for verifying platform token with reference values using Veraison service.
33
37
34
38
* veraison: https://github.com/veraison/services
35
39
36
40
# Preparation
37
41
38
- The 3 aforementioned repositories should be checked out on the same level so it
39
- should look like following:
42
+ Only the Islet repository should be checked manually:
40
43
41
44
CCA/islet
42
- CCA/remote-attestation
43
45
44
46
Now run ` make ` inside the ` CCA/islet/examples/veraison ` directory. This compiles
45
47
some tools that will be used for this demo and places them inside proper
46
48
directories. It also copies the ` root-ca.crt ` used by ` realm-application ` .
47
49
48
- CCA/islet/examples/veraison $ make
50
+ CCA/islet/examples/veraison $ make
49
51
50
52
The files installed are:
51
53
@@ -128,7 +130,7 @@ The generated token is saved as the following file:
128
130
Realm measurement is done by generating a json file containing realm information
129
131
that will be fed to realm verifier.
130
132
131
- ### Using kvmtool-rim-measurer
133
+ ### Using kvmtool-rim-measurer (TODO: this needs simplification)
132
134
133
135
This is performed by a small helper program called ` kvmtool-rim-measurer ` . It basically
134
136
runs a modified lkvm tool that calculates and displays the RIM
@@ -155,7 +157,8 @@ RIM value is between `[]` characters.
155
157
### Create a refence measurement values file
156
158
157
159
Create a ` reference.json ` file using the commands below (replace the
158
- ` PASTE_THE_OBTAINED_RIM_HEX_STRING_HERE ` with the RIM obtained from one of the previous steps:
160
+ ` PASTE_THE_OBTAINED_RIM_HEX_STRING_HERE ` with the RIM obtained from one of the
161
+ previous steps):
159
162
160
163
```
161
164
export RIM="PASTE_THE_OBTAINED_RIM_HEX_STRING_HERE"
@@ -236,9 +239,9 @@ This is how it looks:
236
239
buildroot login: root
237
240
238
241
# cd /shared
239
- shared # ./set-realm-ip.sh
242
+ shared # ./set-realm-ip.sh
240
243
shared # insmod rsi.ko
241
- shared # date 120512002023
244
+ shared # date 120512002023
242
245
243
246
# Running and provisioning verification services (Veraison, realm-verifier)
244
247
0 commit comments