4 ms·
AWS Nitro Enclaves
- kristianpaul 6y agoAnd i just thought my phone was the only device capable of having a secure enclave.
- _msw_ 6y agoDisclosure: I work at AWS, and I played a part in the design of this feature. But not sadly not any coding for this one. Since this is HN, I thought additional links to the open-source licensed software that we released today might be helpful. A lot of it is written in Rust. Nitro Enclaves CLI - https://github.com/aws/aws-nitro-enclaves-cli https://github.com/aws/aws-nitro-enclaves-cli Application that uses ACM managed certificates to do TLS termination inside a Nitro Enclave - https://github.com/aws/aws-nitro-enclaves-acm https://github.com/aws/aws-nitro-enclaves-acm A library for interacting with the TPM-like device called the Nitro Security Module (used to measure code for attestation purposes) - https://github.com/aws/aws-nitro-enclaves-nsm-api https://github.com/aws/aws-nitro-enclaves-nsm-api Some sample C code for use with Nitro Enclaves - https://github.com/aws/aws-nitro-enclaves-sdk-c https://github.com/aws/aws-nitro-enclaves-sdk-c And a sample application showing how to use vsock to communicate - https://github.com/aws/aws-nitro-enclaves-samples https://github.com/aws/aws-nitro-enclaves-samples
- psanford 6y agoThis is really cool. A secure enclave that's just a normal vm, with attestation capabilities is a pretty big deal. I'm especially excited about the new ability to use ACM certificates on ec2 hosts (instead of just a load balancer)[0]. [0]: https://aws.amazon.com/about-aws/whats-new/2020/10/announcing-aws-certificate-manager-for-nitro-enclaves/ https://aws.amazon.com/about-aws/whats-new/2020/10/announcin...