Skip to content

Latest commit

 

History

History
596 lines (503 loc) · 31.9 KB

README.md

File metadata and controls

596 lines (503 loc) · 31.9 KB
Raw

alt text

The Trusted Platform uses a Trusted Platform Module (TPM), Secure Boot, and a provided Certificate Authority to establish a Platform Root of Trust for Storage & Reporting, perform Local and Remote Attestation, encryption, signing, x509 certificate management, data integrity, intrusion detection, licensing, device provisioning and more.

Overview

This project provides a toolkit and framework for building Trusted Computing architectures and web services in Golang.

This project supports the following use cases:

  • Original Equipment Manufacturer
  • Platform Administrator / User
  • IoT Cloud
  • DevOps Automation
  • Enterprise Network Management
  • Mobile Device Management
  • Secure Key Store
  • Trusted Web Services Framework
  • WebAuthN / FIDO2
  • Automated Certificate Management
  • PKI-as-a-Service
  • Single Sign-On

For detailed documentation on the components used in this project, please refer to the docs.

Build

Dependencies

Optional dependencies:

Build

Use the included Makefile to build and perform initial setup.

# Build the binary
make

# Run tests
make test

Configuration

Copy the config file to ./config.yaml (where you will run the tpadm binary). Edit the configuration file according to your environment and requirements.

The Trusted Platform will try to read the TPM Endorsement Key Certificate from NVRAM, however, not all TPM's have their certificates flashed to NVRAM. Next it will attempt to download the EK certificate from the Manufacturer website (currently only Intel is supported). If neither of these methods is able to locate your TPM EK certificate, an EK certificate will be generated. If an EK cert-handle is defined, the generated certificate will be written to NV RAM. It may optionally be stored in the x509 certificate store.

The development and example attestation configs uses a TPM simulator which is reset every time the platform starts. Be sure to set the simulator to false in the platform configuration file to start using your real TPM device. The included prod config file provides some example defaults intended for a production environment.

Algorithm Safety

Selecting secure encryption and hash function algorithms, padding schemes, and cipher suites are critical to the final security posture of an application. Many algorithms and schemes that are in wide use today have been found to contain vulnerabilities. Be sure to check out the Safe Curves website for the latest updates on EC algorithms. The NIST recommends a minimum RSA key size of 2048 until the year 2030, however, many RSA users are already moving towards larger key sizes.

Note that many low cost HSM's don't offer RSA 4096 bit keys or Curve25519. Check your HSM documentation closely prior to purchase.

The TPM 2.0 spec does not support Curve25519, but does support ECDSA. Unfortunately, as can be seen on the Safe Curves website, many ECDSA curves used in the wild are not up to par. For the best security, I recommend preferring RSA over EC for TPM 2.0. Note that the TPM must support FIPS 140-2 to perform RSA-PSS signatures. This can be confirmed by issuing the TPM2_GetCapability and inspecing the TPM_PT_MODES property, or checking the manufacturer datasheet.

If you're looking for general guidance, EdDSA Curve25519 provides the best security by modern standards, followed by RSA (PSS) using strong keys, preferably 4096 bit. The NitroKey 3 is a cost effective PKCS #11 solution providing both RSA 4096 bit keys and Curve25519.

Web Services

The platform includes a built-in web server to host the REST API. The provided configuration files start the web server on HTTP port 8080 and TLS port 8443. The OpenAPI docs can be browsed at https://localhost:8443/swagger.

Procedure to start the embedded web services for the first time:

# Copy a config file to the local directory
cp configs/platform/config.prod.yaml config.yaml

# Run web services
./tpadm webservice

# Navigate to OpenAPI docs
xdg-open https://localhost:8443/swagger/
Key Stores

The Trusted Platform currently includes PKCS #8, PKCS #11 and TPM 2.0 key store modules. All 3 of these modules may be used at the same time.

There are a few important concepts to understand regarding the key stores.

The first is the Platform Key Store, the general purpose key store that acts as a central repository for key store module PINs, secondary key passwords and generic passwords stored by the platform or applications.

The second is the Keychain, which is a collection of Key Store Module configurations, and the keys that belong to the keychain.

A Keychain may be configured with any or all of the supported Key Store Modules, and must contain a valid configuration for any keys on the keychain using that particular module.

Each Certificate Authority has it's own keychain and keys. The PIN / password for the Key Store Modules, if enabled with a platform-policy, are stored in the general purpose Platform Key Store and automatically retrieved by the Trusted Platform as necessary using a PCR policy session which releases the passwords as long as the chosen platform PCR is in it's valid state.

Passwords

The PKCS #8 and TPM 2.0 key store modules support secondary key passwords.

These passwords, if configured with the platform-policy, are stored in the Platform Key Store, and automatically retrieved by the Trusted Platform as necessary using a PCR policy session which releases the password as long as the chosen platform PCR is in it's valid state. If platform-policy is not true, the password will not be stored, and in the case of PKCS #8 and TPM 2.0, will require the password entered when necessary.

PKCS #11 does not support secondary key passwords.

LUKS

At this time, preliminary support for LUKS is included in the Makefile. In the future, full LUKS integration will be provided through the platform.

To setup an ecnrypted LUKS trusted-data volume for platform data, use the included luks-create Makefile target.

# Setup LUKS encrypted volume w/ Makefile
make luks-create

If you don't trust the trusted Makefile, you can create your own key file and volume like this:

# Generate LUKS key file
echo -n "my-secret" > luks.key

# Generate strong key file w/ random bytes
dd bs=2048 count=4 if=/dev/random of=luks.key

# Create LUKS volume
sudo cryptsetup luksFormat --type luks2 trusted-data.luks2 luks.key

Then you can use the luks-mount target to mount your volume prior to starting the platform.

Don't forget to remove your LUKS key from the system. In the future, this step will be fully automated and the key will be sealed to the TPM.

Platform Startup & Local Attestation

When the platform starts up, the Certificate Authorities are initialized, resulting in a Root and Intermediate CA with public / private keys and a signing certificates for each of the keys listed in the platform configuration file. The Intermediate CA will have the Root certificate imported to its trusted root store. A Certificate Revocation List is created and initialized with a dummy certificate for each of the configured key algorithms, in each of the configured Key Store Modules.

After the CA is initialized, local system platform measurements are taken according to the platform configuration file, signed by the CA, and placed into internal blob storage, along with the digest, signature, and checksum of the measurements. On subsequent startups, new system measurements are taken, a new digest is created and verified against the initial platform measurements signature. If the signature does not match (the state is different / unexpected), the platform will return a fatal error and terminate. In the future, it will also integrate with LUKS volumes and run a set of custom event handlers that allow responding to the unexpected state of the system using a plugin architecture.

Remote Attestation

A remote attestation implementation using the procedure outlined by tpm2-community is working, however, be sure to read the notes in the attestation directory regarding this approach. This will be replaced with an ACME device-attest enrollment protocol in the near future.

To test it out using the provided Makefile targets.

# Attestor
make attestor

# Verifier
make verifier

After attestation completes, you should see a new attestation folder appear that looks something like this (on the verifier side):

This example demonstrates a Certificate Authority with PKCS #8, PKCS #11, and TPM 2.0 key store modules configured with RSA (PSS), ECDSA and Ed25519 keys configured to enable simultaneous signing with any of the configured keys. In addition, PKCS #8 and TPM 2.0 keys support secondary password protection, using key level passwords in addition to the PIN used to secure the keys at the hardware level. The passwords are stored in the Platform Key Store as HMAC secrets with an optional PCR policy that allows retrieval of the password as long as the platform is in it's approved state. The key store PINs have the .pin extension in their file names, while secondary passwords are stored using only their common names.

Note that the TPM 2.0 spec does not support Twisted Edward Curves (Ed25519). Many budget friendly HSM's also don't support twisted curves. Be sure to check the specifications on your HSM and to confirm support.

attestation/verifier/trusted-data/
├── b3177f70-89ed-6019-f568-07379867db76
│   ├── 050095df-a7c0-98c1-0b06-3ad5d80c8e8d.lock
│   ├── 050095df-a7c0-98c1-0b06-3ad5d80c8e8d.object
│   ├── 056b65e8-ebad-97d5-48ac-19862056d36f.lock
│   ├── 056b65e8-ebad-97d5-48ac-19862056d36f.object
│   ├── 089b7599-2598-f3c5-d90c-a1e5bddf6786.lock
│   ├── 089b7599-2598-f3c5-d90c-a1e5bddf6786.object
│   ├── 09044801-a3c7-fdbb-665a-ab3de814ff98.lock
│   ├── 09044801-a3c7-fdbb-665a-ab3de814ff98.object
│   ├── 0b1ba04d-8544-34a0-a784-724756dcf40f.lock
│   ├── 0b1ba04d-8544-34a0-a784-724756dcf40f.object
│   ├── 392ff10a-705f-97b0-8eab-614dabd5b9ec.lock
│   ├── 392ff10a-705f-97b0-8eab-614dabd5b9ec.object
│   ├── 3a5fd61e-b27f-b3a1-163f-cb8b2721edc2.lock
│   ├── 3a5fd61e-b27f-b3a1-163f-cb8b2721edc2.object
│   ├── 83fbc37e-2007-c8bc-f2b9-4ec9f45bf30b.lock
│   ├── 83fbc37e-2007-c8bc-f2b9-4ec9f45bf30b.object
│   ├── 8933c982-ccfb-ee2d-7e55-06c17ab52a07.lock
│   ├── 8933c982-ccfb-ee2d-7e55-06c17ab52a07.object
│   ├── 95bee1b0-0a2d-4d45-d3f5-b0e735692cd3.lock
│   ├── 95bee1b0-0a2d-4d45-d3f5-b0e735692cd3.object
│   ├── 9b039fd6-ddf4-4427-a1d0-2587cae6da0e.lock
│   ├── 9b039fd6-ddf4-4427-a1d0-2587cae6da0e.object
│   ├── c1b2cc95-4486-b3e8-0586-245d7e2cab99.lock
│   ├── c1b2cc95-4486-b3e8-0586-245d7e2cab99.object
│   ├── d92b8150-75b7-791a-a9f0-c775680c97d2.lock
│   ├── d92b8150-75b7-791a-a9f0-c775680c97d2.object
│   ├── ddc4bd89-ee49-365b-761e-a5a8018976a2.lock
│   ├── ddc4bd89-ee49-365b-761e-a5a8018976a2.object
│   ├── e8805a14-2fb4-861c-8d7c-0a59f0a9de8d.lock
│   ├── e8805a14-2fb4-861c-8d7c-0a59f0a9de8d.object
│   ├── f27f24ec-daf3-7d23-8cff-b6373321af52.lock
│   ├── f27f24ec-daf3-7d23-8cff-b6373321af52.object
│   ├── token.lock
│   └── token.object
├── blobs
│   ├── tpm
│   │   ├── device-id-001
│   │   │   ├── eventlog
│   │   │   ├── eventlog.digest
│   │   │   ├── eventlog.sha256
│   │   │   ├── eventlog.sig
│   │   │   ├── pcrs
│   │   │   ├── pcrs.digest
│   │   │   ├── pcrs.sha256
│   │   │   ├── pcrs.sig
│   │   │   ├── quote
│   │   │   ├── quote.digest
│   │   │   ├── quote.sha256
│   │   │   └── quote.sig
│   │   └── www.attestor.example.com
│   │       ├── ak.cer
│   │       ├── ak.cer.digest
│   │       ├── ak.cer.sha256
│   │       ├── ak.cer.sig
│   │       ├── eventlog
│   │       ├── eventlog.digest
│   │       ├── eventlog.sha256
│   │       ├── eventlog.sig
│   │       ├── pcrs
│   │       ├── pcrs.digest
│   │       ├── pcrs.sha256
│   │       ├── pcrs.sig
│   │       ├── quote
│   │       ├── quote.digest
│   │       ├── quote.sha256
│   │       └── quote.sig
│   └── .tpm2.rsa.cer
├── ca
│   ├── intermediate-ca.verifier.example.com
│   │   ├── encryption-keys
│   │   ├── hmac-keys
│   │   ├── intermediate-ca.verifier.example.com.pkcs8.ecdsa.key
│   │   ├── intermediate-ca.verifier.example.com.pkcs8.ecdsa.pub
│   │   ├── intermediate-ca.verifier.example.com.pkcs8.ed25519.key
│   │   ├── intermediate-ca.verifier.example.com.pkcs8.ed25519.pub
│   │   ├── intermediate-ca.verifier.example.com.pkcs8.rsa.key
│   │   ├── intermediate-ca.verifier.example.com.pkcs8.rsa.pub
│   │   ├── intermediate-ca.verifier.example.com.tpm2.ecdsa.key.bin
│   │   ├── intermediate-ca.verifier.example.com.tpm2.ecdsa.pub.bin
│   │   ├── intermediate-ca.verifier.example.com.tpm2.rsa.key.bin
│   │   ├── intermediate-ca.verifier.example.com.tpm2.rsa.pub.bin
│   │   ├── issued
│   │   │   └── www.verifier.example.com
│   │   │       ├── www.verifier.example.com.pkcs8.rsa.key
│   │   │       └── www.verifier.example.com.pkcs8.rsa.pub
│   │   ├── secrets
│   │   ├── signing-keys
│   │   └── x509
│   │       ├── ek.tpm2.rsa.cer
│   │       ├── intermediate-ca.attestor.example.com.pkcs8.rsa.cer
│   │       ├── intermediate-ca.verifier.example.com.pkcs11.ecdsa.cer
│   │       ├── intermediate-ca.verifier.example.com.pkcs11.ecdsa.crl
│   │       ├── intermediate-ca.verifier.example.com.pkcs11.rsa.cer
│   │       ├── intermediate-ca.verifier.example.com.pkcs11.rsa.crl
│   │       ├── intermediate-ca.verifier.example.com.pkcs8.ecdsa.cer
│   │       ├── intermediate-ca.verifier.example.com.pkcs8.ecdsa.crl
│   │       ├── intermediate-ca.verifier.example.com.pkcs8.ed25519.cer
│   │       ├── intermediate-ca.verifier.example.com.pkcs8.ed25519.crl
│   │       ├── intermediate-ca.verifier.example.com.pkcs8.rsa.cer
│   │       ├── intermediate-ca.verifier.example.com.pkcs8.rsa.crl
│   │       ├── intermediate-ca.verifier.example.com.tpm2.ecdsa.cer
│   │       ├── intermediate-ca.verifier.example.com.tpm2.ecdsa.crl
│   │       ├── intermediate-ca.verifier.example.com.tpm2.rsa.cer
│   │       ├── intermediate-ca.verifier.example.com.tpm2.rsa.crl
│   │       ├── root-ca.attestor.example.com.pkcs8.rsa.cer
│   │       ├── root-ca.verifier.example.com.pkcs11.ecdsa.cer
│   │       ├── root-ca.verifier.example.com.pkcs11.rsa.cer
│   │       ├── root-ca.verifier.example.com.pkcs8.ecdsa.cer
│   │       ├── root-ca.verifier.example.com.pkcs8.ed25519.cer
│   │       ├── root-ca.verifier.example.com.pkcs8.rsa.cer
│   │       ├── root-ca.verifier.example.com.tpm2.ecdsa.cer
│   │       ├── root-ca.verifier.example.com.tpm2.rsa.cer
│   │       ├── .tpm2.rsa.cer
│   │       ├── www.attestor.example.com.tpm2.rsa.cer
│   │       └── www.verifier.example.com.pkcs8.rsa.cer
│   └── root-ca.verifier.example.com
│       ├── encryption-keys
│       ├── hmac-keys
│       ├── issued
│       ├── root-ca.verifier.example.com.pkcs8.ecdsa.key
│       ├── root-ca.verifier.example.com.pkcs8.ecdsa.pub
│       ├── root-ca.verifier.example.com.pkcs8.ed25519.key
│       ├── root-ca.verifier.example.com.pkcs8.ed25519.pub
│       ├── root-ca.verifier.example.com.pkcs8.rsa.key
│       ├── root-ca.verifier.example.com.pkcs8.rsa.pub
│       ├── root-ca.verifier.example.com.tpm2.ecdsa.key.bin
│       ├── root-ca.verifier.example.com.tpm2.ecdsa.pub.bin
│       ├── root-ca.verifier.example.com.tpm2.rsa.key.bin
│       ├── root-ca.verifier.example.com.tpm2.rsa.pub.bin
│       ├── secrets
│       ├── signing-keys
│       └── x509
│           ├── root-ca.verifier.example.com.pkcs11.ecdsa.cer
│           ├── root-ca.verifier.example.com.pkcs11.ecdsa.crl
│           ├── root-ca.verifier.example.com.pkcs11.rsa.cer
│           ├── root-ca.verifier.example.com.pkcs11.rsa.crl
│           ├── root-ca.verifier.example.com.pkcs8.ecdsa.cer
│           ├── root-ca.verifier.example.com.pkcs8.ecdsa.crl
│           ├── root-ca.verifier.example.com.pkcs8.ed25519.cer
│           ├── root-ca.verifier.example.com.pkcs8.ed25519.crl
│           ├── root-ca.verifier.example.com.pkcs8.rsa.cer
│           ├── root-ca.verifier.example.com.pkcs8.rsa.crl
│           ├── root-ca.verifier.example.com.tpm2.ecdsa.cer
│           ├── root-ca.verifier.example.com.tpm2.ecdsa.crl
│           ├── root-ca.verifier.example.com.tpm2.rsa.cer
│           └── root-ca.verifier.example.com.tpm2.rsa.crl
├── etc
│   ├── config.yaml
│   └── softhsm.conf
├── log
│   └── trusted-platform.log
└── platform
   └── keystore
       ├── encryption-keys
       ├── hmac-keys
       │   ├── intermediate-ca.verifier.example.com
       │   │   ├── intermediate-ca.verifier.example.com.pkcs8.ecdsa.hmac.key.bin
       │   │   ├── intermediate-ca.verifier.example.com.pkcs8.ecdsa.hmac.pub.bin
       │   │   ├── intermediate-ca.verifier.example.com.pkcs8.ed25519.hmac.key.bin
       │   │   ├── intermediate-ca.verifier.example.com.pkcs8.ed25519.hmac.pub.bin
       │   │   ├── intermediate-ca.verifier.example.com.pkcs8.rsa.hmac.key.bin
       │   │   ├── intermediate-ca.verifier.example.com.pkcs8.rsa.hmac.pub.bin
       │   │   ├── intermediate-ca.verifier.example.com.tpm2.ecdsa.hmac.key.bin
       │   │   ├── intermediate-ca.verifier.example.com.tpm2.ecdsa.hmac.pub.bin
       │   │   ├── intermediate-ca.verifier.example.com.tpm2.rsa.hmac.key.bin
       │   │   └── intermediate-ca.verifier.example.com.tpm2.rsa.hmac.pub.bin
       │   ├── intermediate-ca.verifier.example.com.pin
       │   │   ├── intermediate-ca.verifier.example.com.pin.pkcs11.8.hmac.key.bin
       │   │   ├── intermediate-ca.verifier.example.com.pin.pkcs11.8.hmac.pub.bin
       │   │   ├── intermediate-ca.verifier.example.com.pin.tpm2.8.hmac.key.bin
       │   │   └── intermediate-ca.verifier.example.com.pin.tpm2.8.hmac.pub.bin
       │   ├── platform.pin
       │   │   ├── platform.pin.tpm2.8.hmac.key.bin
       │   │   └── platform.pin.tpm2.8.hmac.pub.bin
       │   ├── root-ca.verifier.example.com
       │   │   ├── root-ca.verifier.example.com.pkcs8.ecdsa.hmac.key.bin
       │   │   ├── root-ca.verifier.example.com.pkcs8.ecdsa.hmac.pub.bin
       │   │   ├── root-ca.verifier.example.com.pkcs8.ed25519.hmac.key.bin
       │   │   ├── root-ca.verifier.example.com.pkcs8.ed25519.hmac.pub.bin
       │   │   ├── root-ca.verifier.example.com.pkcs8.rsa.hmac.key.bin
       │   │   ├── root-ca.verifier.example.com.pkcs8.rsa.hmac.pub.bin
       │   │   ├── root-ca.verifier.example.com.tpm2.ecdsa.hmac.key.bin
       │   │   ├── root-ca.verifier.example.com.tpm2.ecdsa.hmac.pub.bin
       │   │   ├── root-ca.verifier.example.com.tpm2.rsa.hmac.key.bin
       │   │   └── root-ca.verifier.example.com.tpm2.rsa.hmac.pub.bin
       │   ├── root-ca.verifier.example.com.pin
       │   │   ├── root-ca.verifier.example.com.pin.pkcs11.8.hmac.key.bin
       │   │   ├── root-ca.verifier.example.com.pin.pkcs11.8.hmac.pub.bin
       │   │   ├── root-ca.verifier.example.com.pin.tpm2.8.hmac.key.bin
       │   │   └── root-ca.verifier.example.com.pin.tpm2.8.hmac.pub.bin
       │   └── www.verifier.example.com
       │       ├── www.verifier.example.com.pkcs8.rsa.hmac.key.bin
       │       └── www.verifier.example.com.pkcs8.rsa.hmac.pub.bin
       ├── issued
       ├── secrets
       └── signing-keys

Status

This project is under active development, APIs can change at any moment.

The main branch will always build and run. Try it out!

  • Trusted Platform
    • Supported Use Cases
      • TPM Manufacturer
      • Original Equipment (Device) Manufacturer
      • Platform Administrator / End User
      • Enterprise Network
      • SOHO Network
    • Certificate Authority
      • Key Storage Modules
      • Key Storage Backends
        • File storage
        • PKCS 11
        • TPM 2.0
        • SoftHSM
        • Raft
      • Formats
      • TLS 1.3
      • Root CA
      • Intermediate CA(s)
      • RSA, ECDSA & EdDSA Key Algorithms
      • Simultaneous issue/sign/verify using any supported algorithm
      • Certificate & Key storage & retrieval
      • Private trusted root certificate store
      • Private trusted intermediate certificate store
      • Distinct CA, TLS, encryption & signing keys
      • RSA, ECDSA, Ed21159 & x25519Kyber768Draft00 support
      • Create & Sign Certificate Signing Requests (CSR)
      • x509 Certificate Revocation Lists (CRLs)
      • Encoding & Decoding support for DER and PEM
      • Automatic download & import Issuer CA(s) to trust store
      • Automatic download & import Revocation Lists (CRLs)
      • Parse & Create CA bundles
      • Create Golang CertPool objects pre-initialized with CA certificates
      • Create Golang tls.Config objects pre-initialized with Root & Client CA bundle and x509 Certificates (mTLS)
      • Signed blob storage
      • Install / Uninstall CA certificates to Operating System trust store
      • Online Certificate Status Protocol (OCSP)
      • Sign TCG-CSR-IDEVID
      • Sign TCG-CSR-LDEVID
      • Generate TCG compliant EK certificate
      • Generate Attestation Key Certificate
      • Forge Certificates (force specified public key)
      • Automatic Certificate Management Environment (ACME)
      • Cross-Signed Certificates with Let's Encrypt CA
    • TPM 2.0
      • Provisioning per TCG recommended best practices
      • Read Endorsement Key Certificate from NVRAM
      • Download Endorsement Key Certificate from Manufacturer
        • Intel
        • Optiga
      • Read Endorsement Key Certificate from x509 certificate store
      • Create EK Certificates
      • Auto-import TPM Manufacturer CA chain
      • Create RSA/ECC EK, SRK, AK, DevID keys and x509 certificates
      • Verify Endorsement Key x509 Certificate w/ CA
      • Credential challenge
      • Activate credential
      • Read Event Log
      • Read Platform Configuration Registers (PCRs)
      • Provide Attestation Key to Client
      • Quote / Verify
      • Create TCG-CSR-IDEVID certificate request
      • Create TCG-CSR-LDEVID certificate request
    • Command Line Interface
      • CA
        • info
        • init
        • install
        • issue
        • revoke
        • show
        • uninstall
      • Platform
        • destroy
        • install
        • password
        • provision
      • TPM
        • clear
        • ek
        • eventlog
        • info
        • provision
      • Remote Attestation
        • Attestor (service consumer / server socket)
          • gRPC service
          • Insecure service
            • Exchange CA certificate bundle with Verifier
            • mTLS auto-negotiation
            • Require TLSv1.3
          • Secure service (requires mTLS)
            • Get Endorsement Key (EK) and Certificate
            • Create Endorsement Key
            • Create Attestation Key
            • Activate Credential
            • Quote
            • Accept service registration key
            • DNS registration
            • ACME device-attest enrollment
        • Verifier (service provider / client socket)
          • Auto-negotiated mTLSv1.3
          • Get Endorsement Key (EK) and Certificate
          • Get Attestation Key Profile (EK, AK, AK Name)
          • Credential Challenge (TPM2_MakeCredential)
          • Activate Credential (TPM2_ActivateCredential)
          • Issue Attestation Key x509 Certificate
          • Verify Quote
          • Provide AK Certificate w/ Secret
          • DNS registration
          • ACME device-attest enrollment
    • Web Services
      • TLS 1.3
      • Web server
      • TLS Web Server
        • Opaque private key
        • mTLS
      • REST API
        • Swagger / OpenAPI Docs
      • JSON Web Tokens
        • Generate Token
        • Refresh Token
        • Validate Token
        • Encrypted private key
        • Opaque Private Key
    • gRPC Remote Attestation
      • TLS 1.3
      • Verifier (Service Provider)
        • Opaque TLS Private Key
        • mTLS auto-negotiation
        • Get Endorsement Key Certificate
        • Get Attestation Key Profile
        • Make Credential Challenge
        • Activate Credential
        • Issue AK x509 Certificate
        • Quote / Verify
        • Automatic Device enrollment
      • Attestor (Client)
        • Opaque TLS Private Key
        • mTLS auto-negotiation
        • Get Endorsement Key Certificate
        • Get Attestation Key Profile
        • Activate Credential
        • Quote / Verify
        • Automatic Device enrollment
    • Plugin System
      • Install / uninstall
      • Sign / verify
    • Volume Encryption (LUKS)
      • Preliminary Luks support for setup
      • Full LUKS integration to create and manage volumes
    • Automated Setup and Provisioning
      • Platform
        • Create LUKS encrypted trusted-data volume
        • Install and configure platform dependencies
      • Embedded Systems
        • Raspberry PI
          • Image builder
            • Secure Boot
            • OTP Password
            • SD Card Writer
            • Device Provisioning
            • Device Onboarding
          • Ansible system configuration
        • Arduino
          • ROM integrity check
          • Platform firmware
          • Firmware flasher
          • Device Provisioning
          • Device Onboarding
    • DNS Server
      • Automatic edge device registration
      • Dynamic DNS updates
    • High Availability
    • Intrusion Detection
      • File Integrity Monitoring
      • Detect unauthorized software or hardware changes
      • Tamper Resistance
        • Pluggable event based response mechanisms
          • Platform shutdown
          • Unmount luks container (re-sealing the platform)
          • Delete luks volume & platform binary
          • Wipe file system

Sponsors
Thanks for 3 NetHSM devices to assist in PKCS #11 & Raft development!

Support

A Discord server has been created for community support.

Please consider supporting this project for ongoing success and sustainability. I'm a passionate open source contributor making a professional living creating free, secure, scalable, robust, enterprise grade, distributed systems and cloud native solutions.

I'm also available for international consulting opportunities. Please let me know how I can assist you or your organization in achieving your desired security posture and technology goals.

https://github.com/sponsors/jeremyhahn

https://www.linkedin.com/in/jeremyhahn