core

Dec 4, 2023 GO-2024-2583

  GO-2024-2583: Encryption bypass in github.com/edgelesssys/marblerun

Aug 25, 2023 GO-2024-2583

  GO-2024-2583: Encryption bypass in github.com/edgelesssys/marblerun

Jun 27, 2023 GO-2024-2583

  GO-2024-2583: Encryption bypass in github.com/edgelesssys/marblerun

Mar 27, 2023 GO-2024-2583

  GO-2024-2583: Encryption bypass in github.com/edgelesssys/marblerun

Jan 31, 2023 GO-2024-2583

  GO-2024-2583: Encryption bypass in github.com/edgelesssys/marblerun

Changes in this version

type Core

+ func (c *Core) AdvanceState(newState state.State, tx store.Transaction) error

+ func (c *Core) GenerateQuote(cert []byte) error

+ func (c *Core) GenerateSecrets(secrets map[string]manifest.Secret, id uuid.UUID, ...) (map[string]manifest.Secret, error)

+ func (c *Core) GetQuote() []byte

+ func (c *Core) GetState() (state.State, string, error)

+ func (c *Core) RequireState(states ...state.State) error

+ func (c *Core) Unlock()

Oct 26, 2022 GO-2024-2583

  GO-2024-2583: Encryption bypass in github.com/edgelesssys/marblerun

Jun 17, 2022 GO-2024-2583

  GO-2024-2583: Encryption bypass in github.com/edgelesssys/marblerun

Nov 8, 2021 GO-2024-2583

  GO-2024-2583: Encryption bypass in github.com/edgelesssys/marblerun

Changes in this version

+ type QuoteError struct

+ func (e QuoteError) Error() string

Sep 7, 2021 GO-2024-2583

  GO-2024-2583: Encryption bypass in github.com/edgelesssys/marblerun

Jul 15, 2021 GO-2024-2583

  GO-2024-2583: Encryption bypass in github.com/edgelesssys/marblerun

Changes in this version

+ type BaseVec interface

+ Delete func(labels prometheus.Labels) bool

+ DeleteLabelValues func(lvs ...string) bool

+ Reset func()

type ClientCore

+ GetSecrets func(ctx context.Context, requestedSecrets []string, requestUser *user.User) (map[string]manifest.Secret, error)

+ GetUpdateLog func(ctx context.Context) (updateLog string, err error)

+ VerifyUser func(ctx context.Context, clientCerts []*x509.Certificate) (*user.User, error)

+ WriteSecrets func(ctx context.Context, rawSecretManifest []byte, updater *user.User) error

type Core

+ func (c *Core) GetSecrets(ctx context.Context, requestedSecrets []string, client *user.User) (map[string]manifest.Secret, error)

+ func (c *Core) GetTLSMarbleRootCertificate(clientHello *tls.ClientHelloInfo) (*tls.Certificate, error)

+ func (c *Core) GetUpdateLog(ctx context.Context) (string, error)

+ func (c *Core) VerifyUser(ctx context.Context, clientCerts []*x509.Certificate) (*user.User, error)

+ func (c *Core) WriteSecrets(ctx context.Context, rawSecretManifest []byte, updater *user.User) error

+ type CounterVec interface

+ GetMetricWith func(labels prometheus.Labels) (prometheus.Counter, error)

+ GetMetricWithLabelValues func(lvs ...string) (prometheus.Counter, error)

+ With func(labels prometheus.Labels) prometheus.Counter

+ WithLabelValues func(lvs ...string) prometheus.Counter

+ type NullBaseVec struct

+ func (NullBaseVec) Delete(labels prometheus.Labels) bool

+ func (NullBaseVec) DeleteLabelValues(lvs ...string) bool

+ func (NullBaseVec) Reset()

+ type NullCollector struct

+ func (NullCollector) Collect(chan<- prometheus.Metric)

+ func (NullCollector) Describe(chan<- *prometheus.Desc)

+ type NullCounter struct

+ func (NullCounter) Add(float64)

+ func (NullCounter) Inc()

+ type NullCounterVec struct

+ func (NullCounterVec) GetMetricWith(labels prometheus.Labels) (prometheus.Counter, error)

+ func (NullCounterVec) GetMetricWithLabelValues(lvs ...string) (prometheus.Counter, error)

+ func (NullCounterVec) With(labels prometheus.Labels) prometheus.Counter

+ func (NullCounterVec) WithLabelValues(lvs ...string) prometheus.Counter

+ type NullMetric struct

+ func (NullMetric) Desc() *prometheus.Desc

+ func (NullMetric) Write(*dto.Metric) error

May 4, 2021 GO-2024-2583

  GO-2024-2583: Encryption bypass in github.com/edgelesssys/marblerun

Apr 14, 2021 GO-2024-2583

  GO-2024-2583: Encryption bypass in github.com/edgelesssys/marblerun

Mar 12, 2021 GO-2024-2583

  GO-2024-2583: Encryption bypass in github.com/edgelesssys/marblerun

Changes in this version

type ClientCore

+ UpdateManifest func(ctx context.Context, rawUpdateManifest []byte) error

+ VerifyAdmin func(ctx context.Context, clientCerts []*x509.Certificate) bool

type Core

+ func (c *Core) GetTLSIntermediateCertificate(clientHello *tls.ClientHelloInfo) (*tls.Certificate, error)

+ func (c *Core) GetTLSRootCertificate(clientHello *tls.ClientHelloInfo) (*tls.Certificate, error)

+ func (c *Core) UpdateManifest(ctx context.Context, rawUpdateManifest []byte) error

+ func (c *Core) VerifyAdmin(ctx context.Context, clientCerts []*x509.Certificate) bool

Dec 16, 2020 GO-2024-2583

  GO-2024-2583: Encryption bypass in github.com/edgelesssys/marblerun

Dec 16, 2020 GO-2024-2583

  GO-2024-2583: Encryption bypass in github.com/edgelesssys/marblerun

Changes in this version

+ const SealedDataFname

+ const SealedKeyFname

+ var ErrEncryptionKey = errors.New("cannot unseal encryption key")

type AESGCMSealer

+ func (s *AESGCMSealer) GenerateNewEncryptionKey() error

+ func (s *AESGCMSealer) SetEncryptionKey(encryptionKey []byte) error

+ type Certificate x509.Certificate

+ func (c *Certificate) UnmarshalJSON(data []byte) error

+ func (c Certificate) MarshalJSON() ([]byte, error)

type ClientCore

+ Recover func(ctx context.Context, encryptionKey []byte) error

type Core

+ func (c *Core) Recover(ctx context.Context, encryptionKey []byte) error

type Manifest

+ Secrets map[string]Secret

type MockSealer

+ func (s *MockSealer) GenerateNewEncryptionKey() error

+ func (s *MockSealer) SetEncryptionKey(key []byte) error

+ type NoEnclaveSealer struct

+ func NewNoEnclaveSealer(sealDir string) *NoEnclaveSealer

+ func (s *NoEnclaveSealer) GenerateNewEncryptionKey() error

+ func (s *NoEnclaveSealer) Seal(data []byte) ([]byte, error)

+ func (s *NoEnclaveSealer) SetEncryptionKey(key []byte) error

+ func (s *NoEnclaveSealer) Unseal() ([]byte, error)

+ type PrivateKey []byte

+ type PublicKey []byte

type Sealer

+ GenerateNewEncryptionKey func() error

+ SetEncryptionKey func(key []byte) error

+ type Secret struct

+ Cert Certificate

+ Private PrivateKey

+ Public PublicKey

+ Shared bool

+ Size uint

+ Type string

+ ValidFor uint

Nov 19, 2020 GO-2024-2583

  GO-2024-2583: Encryption bypass in github.com/edgelesssys/marblerun

Changes in this version

+ const CoordinatorName

+ type AESGCMSealer struct

+ func NewAESGCMSealer(sealDir string, sealKey []byte) *AESGCMSealer

+ func (s *AESGCMSealer) Seal(data []byte) ([]byte, error)

+ func (s *AESGCMSealer) Unseal() ([]byte, error)

+ type ClientCore interface

+ GetCertQuote func(ctx context.Context) (cert string, certQuote []byte, err error)

+ GetManifestSignature func(ctx context.Context) (manifestSignature []byte)

+ GetStatus func(ctx context.Context) (status string, err error)

+ SetManifest func(ctx context.Context, rawManifest []byte) (recoveryDataBytes []byte, err error)

+ type Core struct

+ func NewCore(dnsNames []string, qv quote.Validator, qi quote.Issuer, sealer Sealer, ...) (*Core, error)

+ func NewCoreWithMocks() *Core

+ func (c *Core) Activate(ctx context.Context, req *rpc.ActivationReq) (*rpc.ActivationResp, error)

+ func (c *Core) GetCertQuote(ctx context.Context) (string, []byte, error)

+ func (c *Core) GetManifestSignature(ctx context.Context) []byte

+ func (c *Core) GetStatus(ctx context.Context) (status string, err error)

+ func (c *Core) GetTLSCertificate() (*tls.Certificate, error)

+ func (c *Core) GetTLSConfig() (*tls.Config, error)

+ func (c *Core) SetManifest(ctx context.Context, rawManifest []byte) ([]byte, error)

+ type Manifest struct

+ Clients map[string][]byte

+ Infrastructures map[string]quote.InfrastructureProperties

+ Marbles map[string]Marble

+ Packages map[string]quote.PackageProperties

+ RecoveryKey string

+ func (m Manifest) Check(ctx context.Context) error

+ type Marble struct

+ MaxActivations uint

+ Package string

+ Parameters *rpc.Parameters

+ type MockSealer struct

+ func (s *MockSealer) Seal(data []byte) ([]byte, error)

+ func (s *MockSealer) Unseal() ([]byte, error)

+ type Sealer interface

+ Seal func(data []byte) ([]byte, error)

+ Unseal func() ([]byte, error)