How to input encrypted file inside the enclave. #1116
Unanswered
victormassy
asked this question in
Q&A
Replies: 3 comments 9 replies
-
|
Beta Was this translation helpful? Give feedback.
2 replies
-
|
Thank you for your answer. The key used for encryption should be 16 bytes, but the documentation specifies that an insecure key value should contain 32 bytes. |
Beta Was this translation helpful? Give feedback.
-
No, the documentation doesn't mention 32 bytes at all. The documentation has |
Beta Was this translation helpful? Give feedback.
-
|
I misunderstood the documentation, thank you for your help. Here is what I added to my manifest My application reads the input file with: Is there anything else to add to the manifest file ? I'm not able to read input file. |
Beta Was this translation helpful? Give feedback.
0 replies
-
|
You seem to misunderstand what What you wrote above means this: take a path/file on the host OS with the name And what you wrote in your C program is reading the file |
Beta Was this translation helpful? Give feedback.
7 replies
-
|
Beta Was this translation helpful? Give feedback.
-
|
The logs show that you somehow incorrectly encrypted |
Beta Was this translation helpful? Give feedback.
-
|
I used It returns: Wrap_key was generated with: I then extracted hex value with And used hex vale as key in manifest |
Beta Was this translation helpful? Give feedback.
-
This seems wrong. Hexdump by default prints in Please try with |
Beta Was this translation helpful? Give feedback.
-
|
It's working now ! Thank you so much for your help ! |
Beta Was this translation helpful? Give feedback.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hey,
I would like to run some tests with gramine. I need my application to decrypt and read a file stored outside the enclave.
I would like to use :
fs.mounts = [
{ type = "encrypted", path = "[PATH]", uri = "[URI]", key_name = "[KEY_NAME]" },
]
fs.insecure__keys.[KEY_NAME] = "[32-character hex value]"
as specified in the documentation. If I understand correctly, my file needs to be encrypted with a symmetric key and this key should be hard coded in the manifest (which is fine in my case). Am I correct ?
Which encryption standard should I use ?
Beta Was this translation helpful? Give feedback.
All reactions