harald/teepot
1
0
Fork 0
mirror of https://github.com/matter-labs/teepot.git synced 2025-07-21 15:13:56 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions
357 commits 23 branches 61 tags 2.2 MiB
Commit graph

357 commits

This branch
This branch
All branches
Author SHA1 Message Date
Patryk Bęza
a40675497c
Merge remote-tracking branch 'origin/main' into pab/versioned-backward-compatible-offchain-proof-verifier 2025-01-15 17:02:34 +01:00
Patrick
e5cca31ac0
Merge pull request #250 from matter-labs/preexec-test 
feat(tee-key-preexec): add test container for tee-key-preexec
 2025-01-15 16:01:59 +01:00
Harald Hoyer
99037ceb6c
feat(tee-key-preexec): add test container for tee-key-preexec 
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2025-01-15 15:48:21 +01:00
Harald Hoyer
e649fdab87
Merge pull request #248 from matter-labs/tdx_nix 
feat(tdx): add nix build for TDX google VMs
 2025-01-14 16:10:31 +01:00
Harald Hoyer
dc1e756ec6
feat(tdx): add nix build for TDX google VMs 
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2025-01-14 14:50:43 +01:00
Harald Hoyer
8270c389e4
Merge pull request #247 from matter-labs/collateral_free_on_error 
fix(teepot-tee-quote-verification-rs): free collateral on ffi error
 2025-01-13 15:29:52 +01:00
Harald Hoyer
dc9263911f
fix(teepot-tee-quote-verification-rs): free collateral on ffi error 
Free the FFI collateral on rust checks anyway to prevent memory leaks.

Also remove the `TryFrom<&sgx_ql_qve_collateral_t>` as it is unsafe.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2025-01-13 13:50:04 +01:00
Harald Hoyer
1f88d506a3
Merge pull request #246 from matter-labs/fix_leak 
fix(teepot-tee-quote-verification-rs): memory leak
 2025-01-13 10:53:50 +01:00
Harald Hoyer
584223dc93
fix(teepot-tee-quote-verification-rs): memory leak 
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2025-01-13 10:35:12 +01:00
Patryk Bęza
7f15706733
feat(tee-proof-verifier): add backward compatibility logic 2025-01-10 14:44:09 +01:00
Harald Hoyer
9de56d3adb
Merge pull request #234 from matter-labs/renovate/cachix-install-nix-action-30.x 
chore(deps): update cachix/install-nix-action action to v30
 2025-01-07 11:28:08 +01:00
Patryk Bęza
bdb213c5f6
feat(tee-proof-verifier): add support for Solidity-compatible pubkey in report_data 
This PR is part of the effort to implement on-chain TEE proof
verification. This PR goes hand in hand with:
- https://github.com/matter-labs/zksync-era/pull/3414
- https://github.com/matter-labs/teepot/pull/228
 2025-01-03 11:28:44 +01:00
Patryk Bęza
a9b89ef584
feat(tee-key-preexec): add support for Solidity-compatible pubkey in report_data 
This PR is part of the effort to implement on-chain TEE proof
verification. This PR goes hand in hand with https://github.com/matter-labs/zksync-era/pull/3414.
 2024-12-31 11:11:11 +01:00
renovate[bot]
102f73b1eb
chore(deps): update cachix/install-nix-action action to v30 2024-12-20 16:13:47 +00:00
Patrick
d2fbdb5bed
Merge pull request #236 from matter-labs/flake_update 
chore(flake): update nixsgx flake input
 2024-12-20 17:11:54 +01:00
Harald Hoyer
d11f63701f
chore: fix deny.toml 
see https://github.com/EmbarkStudios/cargo-deny/pull/611

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2024-12-20 15:32:55 +01:00
Harald Hoyer
c5373dfd8f
chore(flake): update nixsgx flake input 
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2024-12-20 14:29:04 +01:00
Harald Hoyer
cc46f8db77
Merge pull request #232 from matter-labs/tdx_extend 
feat: add tdx-extend, sha384-extend and rtmr-calc
 2024-12-20 14:08:52 +01:00
Harald Hoyer
5d32396966
feat: add tdx-extend, sha384-extend and rtmr-calc 
This enables pre-calculating the TDX rtmr[1,2,3] values for an attested boot process.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2024-12-20 13:27:55 +01:00
Harald Hoyer
fbc4897dad
Merge pull request #229 from matter-labs/cargo_update 
chore: cargo update
 2024-12-20 12:44:04 +01:00
Harald Hoyer
0b67a14cd1
chore: cargo update 
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2024-12-20 12:20:39 +01:00
Harald Hoyer
68805b10a8
Merge pull request #226 from matter-labs/TDX 
feat: add TDX
 2024-12-20 12:00:27 +01:00
Harald Hoyer
4610475fae
feat: add TDX support 
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2024-12-20 10:54:24 +01:00
Harald Hoyer
f4fba51e3e
chore: rustfmt 2024-12-20 09:31:03 +01:00
Harald Hoyer
c2e8bb6f94
chore(licensing): clarify licenses for TDX packages 
- Added explicit license clarifications for `tdx-attest-sys` and `tdx-attest-rs` packages.
- Ensured compliance with BSD-3-Clause for both packages.
 2024-12-20 09:31:02 +01:00
Harald Hoyer
a0f101acf1
feat(teepot-crate): add libtdx_attest to dependencies 
- Included `nixsgx.sgx-dcap.libtdx_attest` in the dependencies list.
- Ensures support for TDX attestation in the build environment.
 2024-12-20 09:31:01 +01:00
Harald Hoyer
34a00bc5bd
feat(shell): enhance teepot shell with Rust tools support 
- Add rustfmt, clippy, and rust-src as extensions in the Rust toolchain.
- Include bindgenHook and pkg-config in nativeBuildInputs for improved build support.
- Set RUST_SRC_PATH for better Rust library integration.
 2024-12-20 09:31:01 +01:00
Harald Hoyer
b066cdd15a
fix: update build process for teepot package 
- Fix output format for propagated-user-env-packages.
- Remove empty bin directory after binaries are moved.
 2024-12-20 09:31:00 +01:00
Harald Hoyer
f818ac61c2
chore(flake.nix): update crane to ref 8ff9c45 
- Upgraded crane from v0.17.3 to v0.19.3 using a specific commit ref.
- Ensures compatibility with the latest improvements and fixes in crane.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2024-12-20 09:30:59 +01:00
Harald Hoyer
83d57bf354
chore: update Rust toolchain to version 1.83 
- Upgraded the Rust version in rust-toolchain.toml to 1.83.
- Ensures compatibility and access to the latest features and fixes.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2024-12-20 09:29:43 +01:00
Patrick
e4629aee55
Merge pull request #225 from matter-labs/handle_old_proof_response 
fix(proof-validation): handle optional proof status
 2024-11-28 17:45:21 +01:00
Patrick
78471f5b64
Merge branch 'main' into handle_old_proof_response 2024-11-28 17:28:53 +01:00
Patrick
6e88e200da
Merge pull request #224 from matter-labs/fix_logging 
refactor(logging): enhance logging setup and usage
 2024-11-28 17:25:25 +01:00
Harald Hoyer
a7951f95bc
Merge branch 'main' into handle_old_proof_response 2024-11-28 16:49:04 +01:00
Harald Hoyer
4c2a096917
Merge branch 'main' into fix_logging 2024-11-28 16:48:28 +01:00
Harald Hoyer
ba7868c6b0
Merge pull request #223 from matter-labs/nix_flake_update 
chore: update dependencies and enhance shell configuration
 2024-11-28 16:48:13 +01:00
Harald Hoyer
f0fea5c122
refactor(logging): enhance logging setup and usage 
- Modified the `setup_logging` function to return a `Subscriber`, improving flexibility and reuse.
- Integrated `tracing::subscriber::set_global_default` in the main functions to establish the logging subscriber globally.
- Added configurations for span events and control over file and line information display.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2024-11-28 15:49:15 +01:00
Harald Hoyer
4a0a4f6e5e
fix(proof-validation): handle optional proof status 
Ensure proof status is treated as optional, preventing crashes when status is absent.
- Modify status field to `Option<String>` in `Proof` struct.
- Update validation logic to handle `None` values safely.
- Adjust main logic to check for "permanently_ignored" safely.
 2024-11-28 15:48:23 +01:00
Harald Hoyer
d8239dba2f
chore: update dependencies and enhance shell configuration 
- Updated multiple dependencies in flake.lock to their latest revisions.
- Improved the shell configuration in the teepot with enhanced environment variable settings for SGX support.
- Reinstated OPENSSL_NO_VENDOR and added library paths to ensure compatibility and proper linking.
 2024-11-28 15:45:39 +01:00
Harald Hoyer
5b7f7482e6
Merge pull request #221 from matter-labs/tee/pab/error-handling-get-tee-proofs-api 
feat(verifier): don't retry verifying permanently ignored batches
 2024-11-27 11:09:21 +01:00
Harald Hoyer
35db54779e
Merge branch 'main' into tee/pab/error-handling-get-tee-proofs-api 2024-11-27 10:48:35 +01:00
Patrick
73ce227070
Merge pull request #222 from matter-labs/license 
chore: update lint workflow actions
 2024-11-27 10:33:30 +01:00
Harald Hoyer
2c6a62a471
chore: update lint workflow actions 
- Changed spdx action to reference a stable commit instead of master.
- Changed license list to conform to new action parameter format
 2024-11-27 08:50:42 +01:00
Patryk Bęza
e63d0901fa
feat(verifier): don't retry verifying permanently ignored batches 
Currently, the [TEE verifier][1] – the tool for continuous SGX
attestation and batch signature verification – is [stuck][2] on batches
that failed to be proven and are marked as `permanently_ignored`. The
tool should be able to distinguish between batches that are permanently
ignored (and should be skipped) and batches that have failed but will be
retried. This PR enables that distinction.

This commit goes hand in hand with the following PR:
https://github.com/matter-labs/zksync-era/pull/3321

[1]: https://github.com/matter-labs/teepot/blob/main/bin/verify-era-proof-attestation/src/main.rs
[2]: https://grafana.matterlabs.dev/goto/unFqf57Hg?orgId=1
 2024-11-26 17:19:55 +01:00
Harald Hoyer
1a8a9f17fa
Merge pull request #212 from matter-labs/logging 
feat(logging): centralize logging setup in teepot crate
 2024-09-18 16:38:39 +02:00
Harald Hoyer
af3ab51320
feat(logging): centralize logging setup in teepot crate 
- Added a new logging module in `teepot` crate.
- Removed redundant logging setup code from individual projects.
- Updated dependencies and references for logging setup.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2024-09-18 16:08:13 +02:00
Harald Hoyer
2ff3b1168d
Merge pull request #210 from matter-labs/crane 
fix(flake.nix): remove redundant crane input follow
 2024-09-18 15:46:41 +02:00
Harald Hoyer
b7f4828a6d
Merge branch 'main' into crane 2024-09-18 15:36:26 +02:00
Harald Hoyer
7c61f81137
Merge pull request #211 from matter-labs/magix_nix_cache 
ci: remove magic nix cache
 2024-09-18 15:36:15 +02:00
Harald Hoyer
69ae1d39e3
Merge branch 'main' into magix_nix_cache 2024-09-18 15:24:08 +02:00