@super-protocol/addons-tee 0.9.10 → 2.0.0

package/dist/sgx-native-module/sev-snp-mrenclave.js

@@ -1,323 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SNPMrEnclaveCalculator = void 0;
-const typebox_1 = require("@sinclair/typebox");
-const value_1 = require("@sinclair/typebox/value");
-const fs = __importStar(require("fs"));
-const fsAsync = __importStar(require("fs/promises"));
-const path = __importStar(require("path"));
-const os = __importStar(require("os"));
-const sev_snp_1 = require("./sev-snp");
-const axios_1 = __importDefault(require("axios"));
-const sdk_js_1 = require("@super-protocol/sdk-js");
-const dto_js_1 = require("@super-protocol/dto-js");
-const crypto_1 = require("crypto");
-const stream_1 = require("stream");
-const helpers_1 = require("./helpers");
-const amd_sev_snp_napi_rs_1 = require("../../bindings/amd-sev-snp-napi-rs/");
-const VMJsonSchema = typebox_1.Type.Object({
-    kernel: typebox_1.Type.Object({ sha256: typebox_1.Type.String() }),
-    initrd: typebox_1.Type.Optional(typebox_1.Type.Object({ sha256: typebox_1.Type.String() })),
-    bios_amd: typebox_1.Type.Optional(typebox_1.Type.Object({
-        sha256: typebox_1.Type.String(),
-        bucket: typebox_1.Type.String(),
-        prefix: typebox_1.Type.String(),
-        filename: typebox_1.Type.String(),
-    })),
-    bios: typebox_1.Type.Optional(typebox_1.Type.Object({
-        sha256: typebox_1.Type.String(),
-        bucket: typebox_1.Type.String(),
-        prefix: typebox_1.Type.String(),
-        filename: typebox_1.Type.String(),
-    })),
-});
-class VMConfigCache {
-    constructor(ttl = 5 * 60 * 1000) {
-        this.cache = {};
-        this.ttl = ttl;
-    }
-    set(key, value) {
-        const timestamp = Date.now();
-        this.cache[key] = {
-            value,
-            timestamp,
-        };
-    }
-    get(key, force = false) {
-        const record = this.cache[key];
-        if (record) {
-            if (force === false) {
-                const now = Date.now();
-                if (now - record.timestamp > this.ttl) {
-                    return null;
-                }
-            }
-            return record.value;
-        }
-        return null;
-    }
-    clear() {
-        this.cache = {};
-    }
-}
-class SNPMrEnclaveCalculator {
-    constructor(config) {
-        this.axiosInstance = axios_1.default.create();
-        this.defaultCredentials = {
-            storageType: dto_js_1.StorageType.S3,
-            credentials: {
-                endpoint: "https://gateway.storjshare.io",
-                accessKeyId: "jxekrow2wxmjps6pr2jv22hamtha",
-                secretKey: "jztnpl532njcljtdolnpbszq66lgqmwmgkbh747342hwc72grkohi",
-                // prefix and bucket can be any, as it will be filled later
-                bucket: "",
-                prefix: "",
-            },
-        };
-        this.cacheFolder = config.cacheFolder || fs.mkdtempSync(path.join(os.tmpdir(), "snp-mrenclave-cache-"));
-        const rmPrevCache = config.rmPrevCache ?? false;
-        this.vmRepoOwner = config.vmRepoOwner || "Super-Protocol";
-        this.vmRepo = config.vmRepo || "sp-vm";
-        this.releaseAsset = config.releaseAsset || "vm.json";
-        this.retryInterval = config.downloadAssetRetryInterval ?? 1000;
-        this.retryMax = config.downloadAssetRetryMax ?? 3;
-        this.storageAccess = config.storageAccess ?? this.defaultCredentials;
-        const cacheRecordsTTL = config.cacheRecordsTTL ?? 5 * 60 * 1000;
-        if (rmPrevCache) {
-            (0, helpers_1.gramineCompatibleRmDir)(this.cacheFolder);
-        }
-        if (!fs.existsSync(this.cacheFolder)) {
-            fs.mkdirSync(this.cacheFolder, { recursive: true });
-        }
-        this.vmInfoCache = new VMConfigCache(cacheRecordsTTL);
-    }
-    /**
-     * The method allows to obtain expected mrenclave if the virtual machine for which the report is
-     * submitted was running on one core and a Milan processor
-     * @param report - @see CalcSnpMrEnclaveParams
-     */
-    async getSingleCoreMrEnclave(report) {
-        const mrEnclave = await sev_snp_1.SevSNP.getMrEnclave(Buffer.from(report.rawReport));
-        const vmMeasure = await this.downloadVM(report.build);
-        const expectedMrEnclave = await sev_snp_1.SevSNP.calcSnpMrEnclave({
-            ovmfPath: vmMeasure.ovmfFilePath,
-            kernelHash: vmMeasure.kernelHash,
-            initrdHash: vmMeasure.initrdHash,
-            cmdLineHash: Buffer.from(report.cmdLineHash),
-            vcpuSig: report.cpuSig,
-            vcpuCount: report.cores,
-            vmpl: await (0, amd_sev_snp_napi_rs_1.getReportVmpl)(Buffer.from(report.rawReport)),
-            policy: await (0, amd_sev_snp_napi_rs_1.getReportPolicy)(Buffer.from(report.rawReport)),
-        });
-        if (!mrEnclave.equals(expectedMrEnclave))
-            throw new Error(`Expected mrEnclave does not match the calculated one.\n` +
-                `mrEnclave: ${mrEnclave.toString("hex")}\n` +
-                `expectedMrEnclave: ${expectedMrEnclave.toString("hex")}\n` +
-                `report.build: ${report.build}\n` +
-                `vmMeasure: ${JSON.stringify(vmMeasure)}`);
-        const singleCoreMrEnclave = await sev_snp_1.SevSNP.calcSnpMrEnclave({
-            ovmfPath: vmMeasure.ovmfFilePath,
-            kernelHash: vmMeasure.kernelHash,
-            initrdHash: vmMeasure.initrdHash,
-            cmdLineHash: Buffer.from(report.cmdLineHash),
-            vcpuSig: sev_snp_1.SevSNP.getCpuSig(sev_snp_1.AMD_EPYC_MILAN_CPUINFO),
-            vcpuCount: 1,
-        });
-        return singleCoreMrEnclave;
-    }
-    async downloadAsset(assetUrl) {
-        const { retryInterval, retryMax } = this;
-        const response = await sdk_js_1.helpers.tryWithInterval({
-            checkResult(response) {
-                return { isResultOk: response.status === 200 };
-            },
-            handler: async () => {
-                return this.axiosInstance.get(assetUrl, {
-                    responseType: "arraybuffer",
-                });
-            },
-            checkError(err) {
-                if (axios_1.default.isAxiosError(err) && err.response) {
-                    const status = err.response.status;
-                    return { retryable: status < 400 || status >= 500 || status === 429 };
-                }
-                return { retryable: axios_1.default.isAxiosError(err) };
-            },
-            retryInterval,
-            retryMax,
-        });
-        return response.data;
-    }
-    extractVMData(data) {
-        const vmRaw = data.toString("utf-8");
-        const parsed = JSON.parse(vmRaw);
-        const { isValid } = (0, sdk_js_1.validateBySchema)(parsed, VMJsonSchema);
-        if (!isValid) {
-            const validationErrors = Array.from(value_1.Value.Errors(VMJsonSchema, parsed));
-            if (validationErrors.length > 0) {
-                throw new Error(`Failed to validate VM JSON: ${validationErrors.map((e) => e.message).join(", ")}`);
-            }
-        }
-        const vm = parsed;
-        const kernelHash = vm.kernel.sha256;
-        const initrdHash = vm.initrd?.sha256;
-        const OVMF = vm.bios_amd || vm.bios;
-        if (!OVMF) {
-            throw new Error("Neither bios_amd nor bios is available");
-        }
-        const { sha256, bucket, prefix, filename } = OVMF;
-        if (!sha256 || !bucket || !prefix || !filename) {
-            throw new Error("Missing one or more required fields in OVMF");
-        }
-        return {
-            kernelHash: Buffer.from(kernelHash, "hex"),
-            initrdHash: initrdHash ? Buffer.from(initrdHash, "hex") : undefined,
-            ovmfHash: Buffer.from(sha256, "hex"),
-            ovmfBucket: bucket,
-            ovmfPrefix: prefix,
-            ovmfFilename: filename,
-        };
-    }
-    static calcHashStream(alg = "sha256") {
-        const hash = (0, crypto_1.createHash)(alg);
-        return {
-            process: new stream_1.Transform({
-                transform: (data, encoding, done) => {
-                    hash.update(data);
-                    done(null, data);
-                },
-            }),
-            get: () => hash.digest(),
-        };
-    }
-    static async fileExist(filePath) {
-        try {
-            await fsAsync.access(filePath, fs.constants.F_OK);
-            return true;
-        }
-        catch (err) {
-            return false;
-        }
-    }
-    async getAssetUrl(build) {
-        const { retryInterval, retryMax } = this;
-        const response = await sdk_js_1.helpers.tryWithInterval({
-            checkResult(response) {
-                return { isResultOk: response.status === 200 };
-            },
-            handler: async () => {
-                return this.axiosInstance.get(`https://api.github.com/repos/${this.vmRepoOwner}/${this.vmRepo}/releases/tags/${build}`);
-            },
-            checkError(err) {
-                if (axios_1.default.isAxiosError(err) && err.response) {
-                    const status = err.response.status;
-                    return { retryable: status < 400 || status >= 500 || status === 429 };
-                }
-                return { retryable: axios_1.default.isAxiosError(err) };
-            },
-            retryInterval,
-            retryMax,
-        });
-        const { data } = response;
-        const asset = data.assets.find((asset) => asset.name === this.releaseAsset);
-        if (!asset) {
-            throw new Error(`Failed to find asset named ${this.releaseAsset} for build ${build}.`);
-        }
-        return asset.browser_download_url;
-    }
-    async downloadVM(build) {
-        let fromCache = false;
-        let vmFiles;
-        const vmInfo = this.vmInfoCache.get(build);
-        if (vmInfo) {
-            fromCache = true;
-            vmFiles = vmInfo;
-        }
-        else {
-            try {
-                const assetUrl = await this.getAssetUrl(build);
-                const vm = await this.downloadAsset(assetUrl);
-                vmFiles = this.extractVMData(vm);
-            }
-            catch (error) {
-                const vmInfo = this.vmInfoCache.get(build, true);
-                if (vmInfo) {
-                    fromCache = true;
-                    vmFiles = vmInfo;
-                }
-                else {
-                    throw error;
-                }
-            }
-        }
-        const ovmfPath = path.join(this.cacheFolder, `${vmFiles.ovmfHash.toString("hex")}_OVMF.fd`);
-        let fileExistAndCorrect = false;
-        if (await SNPMrEnclaveCalculator.fileExist(ovmfPath)) {
-            const fileStream = fs.createReadStream(ovmfPath);
-            const hash = await sdk_js_1.Crypto.createHash(fileStream, {
-                algo: dto_js_1.HashAlgorithm.SHA256,
-                encoding: dto_js_1.Encoding.hex,
-            });
-            if (vmFiles.ovmfHash.toString("hex") === hash.hash) {
-                fileExistAndCorrect = true;
-            }
-        }
-        if (fileExistAndCorrect !== true) {
-            await this.downloadOvmf(vmFiles, ovmfPath);
-        }
-        if (fromCache !== true) {
-            this.vmInfoCache.set(build, vmFiles);
-        }
-        return {
-            initrdHash: vmFiles.initrdHash,
-            kernelHash: vmFiles.kernelHash,
-            ovmfFilePath: ovmfPath,
-            ovmfHash: vmFiles.ovmfHash,
-        };
-    }
-    async downloadOvmf(vmFiles, ovmfPath) {
-        const access = {
-            ...this.storageAccess,
-            credentials: {
-                ...this.storageAccess.credentials,
-                bucket: vmFiles.ovmfBucket,
-                prefix: vmFiles.ovmfPrefix.endsWith("/") ? vmFiles.ovmfPrefix : `${vmFiles.ovmfPrefix}/`,
-            },
-        };
-        const storageProvider = (0, sdk_js_1.getStorageProvider)(access);
-        const downloaderStream = await storageProvider.downloadFile(vmFiles.ovmfFilename, {});
-        const { process: hashStream, get: getStreamHash } = SNPMrEnclaveCalculator.calcHashStream("sha256");
-        await stream_1.promises.pipeline(downloaderStream, hashStream, fs.createWriteStream(ovmfPath));
-        if (!vmFiles.ovmfHash.equals(getStreamHash())) {
-            throw new Error("The downloaded OVMF-file does not match the expected checksum");
-        }
-    }
-}
-exports.SNPMrEnclaveCalculator = SNPMrEnclaveCalculator;
-//# sourceMappingURL=data:application/json;base64,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

package/dist/sgx-native-module/sev-snp-schema.d.ts

@@ -1,22 +0,0 @@
-import { Static, TLiteral } from "@sinclair/typebox";
-import { ImportantSecurityFields } from "../../bindings/amd-sev-snp-napi-rs";
-export declare const CommonPolicyKeyName = "Common";
-export declare const importantFieldNames: (keyof ImportantSecurityFields)[];
-export declare enum RuleOperator {
-    Le = "le",
-    Eq = "eq",
-    Ge = "ge"
-}
-declare const PolicyRuleSchema: import("@sinclair/typebox").TObject<{
-    name: import("@sinclair/typebox").TUnion<[TLiteral<string>, ...TLiteral<string>[]]>;
-    operator: import("@sinclair/typebox").TUnion<TLiteral<RuleOperator>[]>;
-    value: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TNumber, import("@sinclair/typebox").TBoolean]>;
-}>;
-export declare const PolicySetSchema: import("@sinclair/typebox").TObject<{
-    [x: string]: any;
-}>;
-export type PolicySet = Static<typeof PolicySetSchema>;
-export type PolicyRule = Static<typeof PolicyRuleSchema> & {
-    name: keyof ImportantSecurityFields;
-};
-export {};

package/dist/sgx-native-module/sev-snp-schema.js

@@ -1,24 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PolicySetSchema = exports.RuleOperator = exports.importantFieldNames = exports.CommonPolicyKeyName = void 0;
-const typebox_1 = require("@sinclair/typebox");
-const amd_sev_snp_napi_rs_1 = require("../../bindings/amd-sev-snp-napi-rs");
-exports.CommonPolicyKeyName = "Common";
-exports.importantFieldNames = Object.keys(amd_sev_snp_napi_rs_1.IMPORTANT_SECURITY_FIELDS_DUMMY);
-const importantFieldLiterals = exports.importantFieldNames.map((k) => typebox_1.Type.Literal(k));
-var RuleOperator;
-(function (RuleOperator) {
-    RuleOperator["Le"] = "le";
-    RuleOperator["Eq"] = "eq";
-    RuleOperator["Ge"] = "ge";
-})(RuleOperator || (exports.RuleOperator = RuleOperator = {}));
-const PolicyRuleSchema = typebox_1.Type.Object({
-    name: typebox_1.Type.Union(importantFieldLiterals),
-    operator: typebox_1.Type.Union(Object.values(RuleOperator).map((op) => typebox_1.Type.Literal(op))),
-    value: typebox_1.Type.Union([typebox_1.Type.Number(), typebox_1.Type.Boolean()]),
-});
-exports.PolicySetSchema = typebox_1.Type.Partial(typebox_1.Type.Object(Object.fromEntries([
-    ...Object.values(amd_sev_snp_napi_rs_1.WellKnownSnpCodeNames).map((key) => [key, typebox_1.Type.Array(PolicyRuleSchema)]),
-    [exports.CommonPolicyKeyName, typebox_1.Type.Array(PolicyRuleSchema)],
-])), { additionalProperties: false });
-//# sourceMappingURL=data:application/json;base64,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

package/dist/sgx-native-module/sev-snp.d.ts

@@ -1,126 +0,0 @@
-/// <reference types="node" />
-import { CpuInfo, ImportantSecurityFields, WellKnownSnpCodeNames } from "../../bindings/amd-sev-snp-napi-rs/";
-import { SnpCert, SevSnpCertificateFormat, SNPReport, SNPReportWithChain } from "../proto/AmdSevSnp";
-import { PolicySet } from "./sev-snp-schema";
-export interface CalcSnpMrEnclaveParams {
-    ovmfPath: string;
-    kernelHash: Buffer;
-    initrdHash?: Buffer;
-    cmdLineHash: Buffer;
-    vcpuSig: number;
-    vcpuCount: number;
-    vmpl?: number;
-    policy?: bigint;
-}
-export declare const AMD_EPYC_MILAN_CPUINFO: CpuInfo;
-export declare const EMPTY_INITRD_SHA256_HASH: Buffer;
-export type ArkHashes = {
-    [key: string]: Buffer;
-};
-export declare function getDefaultArkHashes(): ArkHashes;
-export declare class SevSNP {
-    static serializeSNPReport(report: SNPReportWithChain): Buffer;
-    static deserializeSNPReport(serialized: Buffer): SNPReportWithChain;
-    protected static convertCertToPem(cert: Buffer): string;
-    protected static convertPemToDer(cert: string): Buffer;
-    protected static splitCerts(certsPem: string): string[];
-    protected static readCmdLine(): Promise<string>;
-    /**
-     * Method for generation AMD SEV-SNP Report
-     * @param userData - The data that will be included in the report and will be signed
-     * @param vmpl - Optional VMPL value to pass to the firmware when requesting a report (default: 0)
-     */
-    static generateSNPReport(userData: Buffer, vmpl?: number): Promise<SNPReport>;
-    /**
-     * Method for fetch certificates from AMD KDS
-     * @param report - report generated by the `generateSNPReport` method
-     * @param options - options for working with HTTP, allows you to configure repetitions and the interval between them,
-     *                  as well as the format of the returned certificates
-     */
-    static getReportChain(report: SNPReport, options?: {
-        retryMax?: number;
-        retryInterval?: number;
-        certFormat?: SevSnpCertificateFormat;
-    }): Promise<SnpCert[]>;
-    /**
-     * Method for generation AMD SEV-SNP Report and fetching certificates
-     * @param userData - @see generateSNPReport
-     * @param options - @see getReportChain
-     */
-    static generateSNPReportWithChain(userData: Buffer, options?: {
-        retryMax?: number;
-        retryInterval?: number;
-        certFormat?: SevSnpCertificateFormat;
-    }): Promise<SNPReportWithChain>;
-    protected static runSubProcess(binaryPath: string, args?: string[], options?: {
-        cwd?: string;
-        timeoutMs?: number;
-    }): Promise<{
-        exitCode: number;
-        stdout: string;
-        stderr: string;
-    }>;
-    static getCertHash(cert: Omit<SnpCert, "type">): Buffer;
-    protected static isValidArk(ARK: SnpCert, trustedHashes: ArkHashes): boolean;
-    /**
-     * AMD SEV-SNP verification method
-     * @param report - report with full certificate chain
-     * @param options - trustedHashes - map of trusted AMD ARK Certificates (CommonName as Key, Sha256 Hash of Der Certificate as Value) - optional
-     *                  timeoutMs - timeout of the utility snpnost in ms
-     *                  snpGuestBinaryPath - path for snpguest util
-     */
-    static verifyReport(report: SNPReportWithChain, options?: {
-        trustedHashes?: ArkHashes;
-        timeoutMs?: number;
-        snpGuestBinaryPath?: string;
-        tmpDirTemplate?: string;
-    }): Promise<void>;
-    protected static calcMrEnclave(measure: Buffer, vmpl: number, policy: bigint): Buffer;
-    /**
-     * Method for obtaining mrEnclave from report. MrEnclave includes report measure, report vmpl and report policy
-     * @param report - report without certificates
-     */
-    static getMrEnclave(report: Buffer): Buffer;
-    /**
-     * Method for obtaining reportData. This data was passed when generating the report
-     * @param report - report without certificates
-     */
-    static getReportData(report: Buffer): Promise<Buffer>;
-    /**
-     * Method for obtaining measure. Please do not confuse with mrenclave. Report measure is part of mrEnclave.
-     * @param report - report without certificates
-     */
-    static getReportMeasure(report: Buffer): Promise<Buffer>;
-    protected static calculateFileSha256(filePath: string): Promise<Buffer>;
-    protected static calculateCmdlineHash(cmdLine: string): Buffer;
-    /**
-     * The method allows to get the expected mrEnclave without generating a report
-     * @param params - @see CalcSnpMrEnclaveParams
-     */
-    static calcSnpMrEnclave(params: CalcSnpMrEnclaveParams): Promise<Buffer>;
-    protected static extractBuildFromCmdline(cmdLine: string, paramName?: string): string;
-    /**
-     * Compute the 32-bit CPUID signature from family, model, and stepping.
-     * This computation is described in AMD's CPUID Specification, publication #25481
-     * https://www.amd.com/system/files/TechDocs/25481.pdf
-     * See section: CPUID Fn0000_0001_EAX Family, Model, Stepping Identifiers
-     * @param cpuInfo - Structure containing family, model and stepping @see CpuInfo
-     */
-    static getCpuSig(cpuInfo: CpuInfo): number;
-    static getReportImportantSecurityFields(report: Buffer): Promise<ImportantSecurityFields>;
-    static getReportCpuInfo(report: Buffer): Promise<CpuInfo>;
-    static getCpuGeneration(cpuInfo: CpuInfo): Promise<WellKnownSnpCodeNames>;
-    /**
-     * Parse and validate policy
-     * @param input - Raw policy as json-text or object
-     */
-    static parsePolicySet(input: string | Record<string, unknown>): PolicySet;
-    private static checkRule;
-    /**
-     * Verify SNP report against a PolicySet.
-     * Throws an error if any rule fails.
-     * @param report - SNPReport
-     * @param policySet - PolicySet containing rules
-     */
-    static verifyPolicy(report: Buffer, policySet: PolicySet): Promise<void>;
-}