kbs

README

Intel^® Security Libraries for Data Center - Key Broker Service

The Intel^® SecL - DC Key Broker Service(KBS) component performs key distribution using platform trust to authorize key transfers. The KBS verifies the host's attestation from the Verification Service, verifies all digital signatures, and retains final control over whether the decryption key is issued. If the server's attestation meets the policy requirements, the KBS issues a decryption key itself wrapped using the AIK-derived binding key from the host that was attested, cryptographically ensuring that only the attested host can decrypt the requested image

Key features

• Provides and retains encryption/decryption keys for virtual machine images / docker images
• The Key Broker Service connects to a back-end 3rd Party KMIP-compliant key management service, like OpenStack Barbican, for key creation and vaulting services

Build Key Broker Service

• Git clone the Key Broker Service
• Run scripts to build the Key Broker Service

$ git clone https://github.com/intel-secl/intel-secl.git
$ cd intel-secl
$ make kbs-installer

Links

• Use Automated Build Steps to build all repositories in one go, this will also provide provision to install prerequisites and would handle order and version of dependent repositories.

Note: Automated script would install a specific version of the build tools, which might be different than the one you are currently using

• Product Documentation

Documentation

Overview

* Copyright (C) 2020 Intel Corporation * SPDX-License-Identifier: BSD-3-Clause

* Copyright (C) 2020 Intel Corporation * SPDX-License-Identifier: BSD-3-Clause

* Copyright (C) 2020 Intel Corporation * SPDX-License-Identifier: BSD-3-Clause

* Copyright (C) 2020 Intel Corporation * SPDX-License-Identifier: BSD-3-Clause

* Copyright (C) 2020 Intel Corporation * SPDX-License-Identifier: BSD-3-Clause

* Copyright (C) 2020 Intel Corporation * SPDX-License-Identifier: BSD-3-Clause

Index

• type App
  • func (app *App) Run(args []string) error

Types

type App

type App struct {
	HomeDir        string
	ConfigDir      string
	LogDir         string
	ExecutablePath string
	ExecLinkPath   string
	RunDirPath     string

	Config *config.Configuration

	ConsoleWriter io.Writer
	ErrorWriter   io.Writer
	LogWriter     io.Writer
	SecLogWriter  io.Writer
	HTTPLogWriter io.Writer
}

func (*App) Run

func (app *App) Run(args []string) error