Trusted Channels tests and utils files

scripts

Folder with scripts to work on certificates, extensions and keys

• parse_crt.sh: script to parse certificates in several formats
• parse_ext.sh: script to parse extension in several formats
• parse_key.sh <hex_string_public_key>: script to parse a key from hexadecimal format to base64 encoding
• setup.sh: script to be run after cloning the repository to setup the default structure to be used for parsing and the files to be written
• verify_dice_crt.sh: script to verify the certificates in the DICE chain

Certificates

• board: Manufacturer certificate in board, selfsigned
• man: Manufacturer certificate in QEMU, selfsigned
• drk: Device Root Key certificate, signed by board or man
• sm: Security Monitor ECA certificate, signed by drk
• lak: Enclave's Local Attestation Key certificate, signed by sm
• ldevid: Enclave's Local Device Identity certificate, signed by sm
• tmp: Enclave's keypair certificate, signed by ldevid
• xca: External CA certificate, selfsigned
• xca_ldevid: Enclave's Local Device Identity certificate, signed by xca
• crl: Generic CRL
• crl_crt: CA certificate that signed the CRL crl

performace_tests

Folder with the python script to analyse the performance of the trusted channel and the files with the measures

• main.py: python script for performance ananlysis
• rXX.txt: file with the performance of run XX

Relationships between measures

"TA" > "DICE setup" + "certificate" + "TLS" "certificate" > "CSR generation" + "XCA API" "TLS" > "setup" + "handshake" + "connection" "setup" > "network"