This example is a concrete solution of private-set-intersection problem. It leverages Intel SGX to achieve confidenaility, 100% accuracy, and the best performance. This code sample is derived from linux-sgx-remoteattestation, and only the enclave is written in Rust.
For convenience, we simply add
SGX_MODE=HW SGX_PRERELEASE=1 to the Makefile and please run
make in both
SMCServer to build respectively.
The code consists of two separate programs, the SMCClient and the SMCServer. The message exchange over the network is performed using Google Protocol Buffers.
Before running the code, some settings have to be set in the
The application port and IP
A server certificate and private key are required for the SSL communication between the SP and the Application (which can be self-signed) e.g.
openssl req -x509 -nodes -newkey rsa:4096 -keyout server.key -out server.crt -days 365
The SPID provided by Intel when registering for the developer account
The certificate sent to Intel when registering for the developer account
IAS Rest API url (should stay the same)
To be able to run the above code some external libraries are needed:
Google Protocol Buffers (should already be installed with the SGX SDK package) otherwise install
After the installation of those dependencies, the code can be compiled with the following commands:
cd SMCClient make cd ../SMCServer make SGX_MODE=HW SGX_PRERELEASE=1
cd SMCServer ./app
Run two SMCClient:
cd SMCClient ./app hash1.txt ./app hash2.txt
Example of a remote attestation with Intel's SGX including the communication with IAS.
The code requires the installation of Intel SGX here and the SGX driver here. Furthermore, also a developer account for the usage of IAS has be registered Deverloper account. After the registration with a certificate (can be self-signed for development purposes), Intel will respond with a SPID which is needed to communicate with IAS.
In addition, please manually install
libjsoncpp-dev for dependency.