mirror/libsignal
0
0
Fork 0
mirror of https://github.com/signalapp/libsignal.git synced 2024-09-20 20:03:07 +02:00
Code

Add SVR2 attestation constants for newly created SVR2 mrenclaves.

Browse Source
This commit is contained in:
gram-signal 2023-11-16 15:15:13 -07:00 committed by GitHub
parent 7f023e7d46
commit 55b61dd1dd
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 28 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
rust/attest/src/svr2.rs
View File

@ -15,7 +15,7 @@ use crate::util::SmallMap;
/// Map from MREnclave to intel SW advisories that are known to be mitigated in the
/// build with that MREnclave value
const ACCEPTABLE_SW_ADVISORIES: &SmallMap<MREnclave, &'static [&'static str], 2> =
const ACCEPTABLE_SW_ADVISORIES: &SmallMap<MREnclave, &'static [&'static str], 4> =
&SmallMap::new([
(
hex!("a8a261420a6bb9b61aa25bf8a79e8bd20d7652531feb3381cbffd446d270be95"),
@ -25,6 +25,14 @@ const ACCEPTABLE_SW_ADVISORIES: &SmallMap<MREnclave, &'static [&'static str], 2>
hex!("6ee1042f9e20f880326686dd4ba50c25359f01e9f733eeba4382bca001d45094"),
&["INTEL-SA-00615", "INTEL-SA-00657"] as &[&str],
),
(
hex!("acb1973aa0bbbd14b3b4e06f145497d948fd4a98efc500fcce363b3b743ec482"),
&["INTEL-SA-00615", "INTEL-SA-00657"] as &[&str],
),
(
hex!("a6622ad4656e1abcd0bc0ff17c229477747d2ded0495c4ebee7ed35c1789fa97"),
&["INTEL-SA-00615", "INTEL-SA-00657"] as &[&str],
),
]);
/// SW advisories known to be mitigated by default. If an MREnclave is provided that
@ -50,7 +58,7 @@ impl PartialEq<svr2::RaftGroupConfig> for RaftConfig {
}
/// Expected raft configuration for a given enclave.
static EXPECTED_RAFT_CONFIG: SmallMap<MREnclave, &'static RaftConfig, 2> = SmallMap::new([
static EXPECTED_RAFT_CONFIG: SmallMap<MREnclave, &'static RaftConfig, 4> = SmallMap::new([
(
hex!("a8a261420a6bb9b61aa25bf8a79e8bd20d7652531feb3381cbffd446d270be95"),
&RaftConfig {
@ -69,6 +77,24 @@ static EXPECTED_RAFT_CONFIG: SmallMap<MREnclave, &'static RaftConfig, 2> = Small
group_id: 3950115602363750357,
},
),
(
hex!("acb1973aa0bbbd14b3b4e06f145497d948fd4a98efc500fcce363b3b743ec482"),
&RaftConfig {
min_voting_replicas: 3,
max_voting_replicas: 5,
super_majority: 0,
group_id: 16934825672495360159,
},
),
(
hex!("a6622ad4656e1abcd0bc0ff17c229477747d2ded0495c4ebee7ed35c1789fa97"),
&RaftConfig {
min_voting_replicas: 4,
max_voting_replicas: 7,
super_majority: 2,
group_id: 1230918306983775578,
},
),
]);
pub struct Svr2Handshake {