Skip to content

Commit

Permalink
Update ledgers/ccf/README.md
Browse files Browse the repository at this point in the history
Co-authored-by: Bruno Vavala <[email protected]>
Signed-off-by: prakashngit <[email protected]>
  • Loading branch information
prakashngit and bvavala authored Mar 14, 2024
1 parent 8ce49e8 commit 9e460ff
Showing 1 changed file with 5 additions and 1 deletion.
6 changes: 5 additions & 1 deletion ledgers/ccf/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -231,7 +231,11 @@ verify enclave attestation reports. We note that PDO currently supports EPID
attestation verification, and while running in SGX HW mode, the eservice submits
IAS attestation report to the TP as part of contract enclave
registration with TP. To help the TP verify the IAS attestation report, the TP
must be programmed with expected `MREnclave`, enclave `basename` and `ias_public_key`.
must be programmed with the following SGX-defined expected values:
* `MREnclave`, a unique identifier of the contract enclave code;
* `basename`, which contains (and is directly derived from) the SPID in EPID attestations;
* `ias_public_key`, which is the IAS public key for verifying attestation reports.
At contract enclave registration time, the TP verifies that an attestation report is correctly signed by IAS and includes the expected values.
Further, the CCF TP governance consortium is permitted to change the
values of these parameters, subject to TP consortium governance rules.

Expand Down

0 comments on commit 9e460ff

Please sign in to comment.