Re: LibreSSL: Use of hardware enclaves to protect TLS keys

2023-07-14 Thread Ostap Cherkashin
Thank you for sharing your suggestions and thoughts. I am working with Julius on a project and, after discussing it a bit, we really like the idea of making privilege separation for private keys in LibreSSL. First, it solves the problem when running on a non-virtualized OpenBSD. Second, it establis

LibreSSL: Use of hardware enclaves to protect TLS keys

2023-07-02 Thread Julius Chrobak
Hello, I would like to keep the TLS server private key in a hardware enclave, such as Intel SGX. I found a solution - TaLoS (https://github.com/lsds/TaLoS), which is a fork of LibreSSL. Have you considered merging TaLoS or implementing something along these lines in LibreSSL? Thank you and rega