intel / ehsm

An End-to-End Distributed and Scalable Cloud KMS (Key Management System) built on top of Intel SGX enclave-based HSM (Hardware Security Module), aka eHSM.

Home Page:https://community.intel.com/t5/Blogs/Tech-Innovation/open-intel/An-Intel-SGX-based-Hardware-Security-Module-backed-Key/post/1360130?wapkw=eHSM

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Bug: createkey causes eHSM-KMS-Service to abort.

nntp4 opened this issue · comments

commented

If the --purpose flag is passed, creating the key will cause eHSM-KMS-Service to abort.
Example:

# first 
./run_with_single.sh

# second
python3 createkey.py --url  https://127.0.0.1:9002 --keyspec EH_AES_GCM_256  --origin EH_INTERNAL_KEY  --purpose EH_PURPOSE_ENCRYPT_DECRYPT

currently, it don't support --purpose yet.

commented

currently, it don't support --purpose yet.

It is recommended to implement input validation measures to prevent user input parameters from causing the process to abort, as this could potentially be exploited by hackers to attack the server.

Make sense. Thanks for your input. We will take a look.