[feat] Add Key Management Enclaves with YubiKey and NanoPC-T6 Support #223
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
edtubbs
force-pushed
the
0.1.3-dev-openenclave-cli
branch
4 times, most recently
from
0a035b4 to
c46880e
Compare
edtubbs
force-pushed
the
0.1.3-dev-openenclave-cli
branch
4 times, most recently
from
94d62d7 to
75e3735
Compare
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
openenclave, optee: added key manager enclaves openenclave, optee: added command line interfaces ci: updated x86 target for openenclave ci: added aarch64 target for op-tee ci: added x86 target for nixos doc: added enclave.md depends: added libyubikey, libusb and libykpiv sha: added sha1 and hmac for authentication with yubikey tests: added sha1 and hmac address: added wrapper for address from account pub key example: added wrapper test: added wrapper to bip44_test [feat] added yubikey for storage config, cmake, seal, tests: added yubikey support seal: added encrypted blobs to software encryption such, spvnode, wallet: updated software encryption tests: added encrypted blobs doc: added yubikey.md [feat] added NanoPC-T6 enclave ci: added NanoPC-T6 support for op-tee doc: updated enclave.md optee: added rk3588-nanopi6-common.dtsi.patch optee: added nanopi6.h.patch
edtubbs
force-pushed
the
0.1.3-dev-openenclave-cli
branch
from
75e3735 to
4d7df9c
Compare
This was referenced Nov 12, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Adds key management enclaves for both OpenEnclave and OP-TEE (see
docs/enclaves.md). It also introduces YubiKey support (seedocs/yubikey.md), enabling secure storage of encrypted seeds, mnemonics, and master keys. The CI has been updated with x86 targets for OpenEnclave and aarch64 for OP-TEE.Additionally, NanoPC-T6 support has been implemented for OP-TEE, with related patches and firmware currently in the upstreaming process. Documentation updates provide detailed configuration and usage instructions, and new tests cover SHA1, HMAC, and encrypted blob functionality.