Commit graph

356 commits

Author SHA1 Message Date
Harald Hoyer
e2c31919c9
Merge pull request #251 from matter-labs/pab/onchain-verification
feat(tee-key-preexec): support for onchain-compatible pubkey in report_data
2025-01-17 13:17:16 +01:00
Patryk Bęza
afa524c18c
Address code review comments 2025-01-17 12:41:07 +01:00
Patryk Bęza
2d04ba0508
feat(tee-key-preexec): add support for Solidity-compatible pubkey in report_data
This PR is part of the effort to implement on-chain TEE proof
verification. This PR goes hand in hand with https://github.com/matter-labs/zksync-era/pull/3414.
2025-01-16 20:46:16 +01:00
Patrick
e5cca31ac0
Merge pull request #250 from matter-labs/preexec-test
feat(tee-key-preexec): add test container for tee-key-preexec
2025-01-15 16:01:59 +01:00
Harald Hoyer
99037ceb6c
feat(tee-key-preexec): add test container for tee-key-preexec
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2025-01-15 15:48:21 +01:00
Harald Hoyer
e649fdab87
Merge pull request #248 from matter-labs/tdx_nix
feat(tdx): add nix build for TDX google VMs
2025-01-14 16:10:31 +01:00
Harald Hoyer
dc1e756ec6
feat(tdx): add nix build for TDX google VMs
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2025-01-14 14:50:43 +01:00
Harald Hoyer
8270c389e4
Merge pull request #247 from matter-labs/collateral_free_on_error
fix(teepot-tee-quote-verification-rs): free collateral on ffi error
2025-01-13 15:29:52 +01:00
Harald Hoyer
dc9263911f
fix(teepot-tee-quote-verification-rs): free collateral on ffi error
Free the FFI collateral on rust checks anyway to prevent memory leaks.

Also remove the `TryFrom<&sgx_ql_qve_collateral_t>` as it is unsafe.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2025-01-13 13:50:04 +01:00
Harald Hoyer
1f88d506a3
Merge pull request #246 from matter-labs/fix_leak
fix(teepot-tee-quote-verification-rs): memory leak
2025-01-13 10:53:50 +01:00
Harald Hoyer
584223dc93
fix(teepot-tee-quote-verification-rs): memory leak
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2025-01-13 10:35:12 +01:00
Harald Hoyer
9de56d3adb
Merge pull request #234 from matter-labs/renovate/cachix-install-nix-action-30.x
chore(deps): update cachix/install-nix-action action to v30
2025-01-07 11:28:08 +01:00
renovate[bot]
102f73b1eb
chore(deps): update cachix/install-nix-action action to v30 2024-12-20 16:13:47 +00:00
Patrick
d2fbdb5bed
Merge pull request #236 from matter-labs/flake_update
chore(flake): update nixsgx flake input
2024-12-20 17:11:54 +01:00
Harald Hoyer
d11f63701f
chore: fix deny.toml
see https://github.com/EmbarkStudios/cargo-deny/pull/611

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-12-20 15:32:55 +01:00
Harald Hoyer
c5373dfd8f
chore(flake): update nixsgx flake input
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-12-20 14:29:04 +01:00
Harald Hoyer
cc46f8db77
Merge pull request #232 from matter-labs/tdx_extend
feat: add tdx-extend, sha384-extend and rtmr-calc
2024-12-20 14:08:52 +01:00
Harald Hoyer
5d32396966
feat: add tdx-extend, sha384-extend and rtmr-calc
This enables pre-calculating the TDX rtmr[1,2,3] values for an attested boot process.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-12-20 13:27:55 +01:00
Harald Hoyer
fbc4897dad
Merge pull request #229 from matter-labs/cargo_update
chore: cargo update
2024-12-20 12:44:04 +01:00
Harald Hoyer
0b67a14cd1
chore: cargo update
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-12-20 12:20:39 +01:00
Harald Hoyer
68805b10a8
Merge pull request #226 from matter-labs/TDX
feat: add TDX
2024-12-20 12:00:27 +01:00
Harald Hoyer
4610475fae
feat: add TDX support
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-12-20 10:54:24 +01:00
Harald Hoyer
f4fba51e3e
chore: rustfmt 2024-12-20 09:31:03 +01:00
Harald Hoyer
c2e8bb6f94
chore(licensing): clarify licenses for TDX packages
- Added explicit license clarifications for `tdx-attest-sys` and `tdx-attest-rs` packages.
- Ensured compliance with BSD-3-Clause for both packages.
2024-12-20 09:31:02 +01:00
Harald Hoyer
a0f101acf1
feat(teepot-crate): add libtdx_attest to dependencies
- Included `nixsgx.sgx-dcap.libtdx_attest` in the dependencies list.
- Ensures support for TDX attestation in the build environment.
2024-12-20 09:31:01 +01:00
Harald Hoyer
34a00bc5bd
feat(shell): enhance teepot shell with Rust tools support
- Add rustfmt, clippy, and rust-src as extensions in the Rust toolchain.
- Include bindgenHook and pkg-config in nativeBuildInputs for improved build support.
- Set RUST_SRC_PATH for better Rust library integration.
2024-12-20 09:31:01 +01:00
Harald Hoyer
b066cdd15a
fix: update build process for teepot package
- Fix output format for propagated-user-env-packages.
- Remove empty bin directory after binaries are moved.
2024-12-20 09:31:00 +01:00
Harald Hoyer
f818ac61c2
chore(flake.nix): update crane to ref 8ff9c45
- Upgraded crane from v0.17.3 to v0.19.3 using a specific commit ref.
- Ensures compatibility with the latest improvements and fixes in crane.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-12-20 09:30:59 +01:00
Harald Hoyer
83d57bf354
chore: update Rust toolchain to version 1.83
- Upgraded the Rust version in rust-toolchain.toml to 1.83.
- Ensures compatibility and access to the latest features and fixes.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-12-20 09:29:43 +01:00
Patrick
e4629aee55
Merge pull request #225 from matter-labs/handle_old_proof_response
fix(proof-validation): handle optional proof status
2024-11-28 17:45:21 +01:00
Patrick
78471f5b64
Merge branch 'main' into handle_old_proof_response 2024-11-28 17:28:53 +01:00
Patrick
6e88e200da
Merge pull request #224 from matter-labs/fix_logging
refactor(logging): enhance logging setup and usage
2024-11-28 17:25:25 +01:00
Harald Hoyer
a7951f95bc
Merge branch 'main' into handle_old_proof_response 2024-11-28 16:49:04 +01:00
Harald Hoyer
4c2a096917
Merge branch 'main' into fix_logging 2024-11-28 16:48:28 +01:00
Harald Hoyer
ba7868c6b0
Merge pull request #223 from matter-labs/nix_flake_update
chore: update dependencies and enhance shell configuration
2024-11-28 16:48:13 +01:00
Harald Hoyer
f0fea5c122
refactor(logging): enhance logging setup and usage
- Modified the `setup_logging` function to return a `Subscriber`, improving flexibility and reuse.
- Integrated `tracing::subscriber::set_global_default` in the main functions to establish the logging subscriber globally.
- Added configurations for span events and control over file and line information display.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-11-28 15:49:15 +01:00
Harald Hoyer
4a0a4f6e5e
fix(proof-validation): handle optional proof status
Ensure proof status is treated as optional, preventing crashes when status is absent.
- Modify status field to `Option<String>` in `Proof` struct.
- Update validation logic to handle `None` values safely.
- Adjust main logic to check for "permanently_ignored" safely.
2024-11-28 15:48:23 +01:00
Harald Hoyer
d8239dba2f
chore: update dependencies and enhance shell configuration
- Updated multiple dependencies in flake.lock to their latest revisions.
- Improved the shell configuration in the teepot with enhanced environment variable settings for SGX support.
- Reinstated OPENSSL_NO_VENDOR and added library paths to ensure compatibility and proper linking.
2024-11-28 15:45:39 +01:00
Harald Hoyer
5b7f7482e6
Merge pull request #221 from matter-labs/tee/pab/error-handling-get-tee-proofs-api
feat(verifier): don't retry verifying permanently ignored batches
2024-11-27 11:09:21 +01:00
Harald Hoyer
35db54779e
Merge branch 'main' into tee/pab/error-handling-get-tee-proofs-api 2024-11-27 10:48:35 +01:00
Patrick
73ce227070
Merge pull request #222 from matter-labs/license
chore: update lint workflow actions
2024-11-27 10:33:30 +01:00
Harald Hoyer
2c6a62a471
chore: update lint workflow actions
- Changed spdx action to reference a stable commit instead of master.
- Changed license list to conform to new action parameter format
2024-11-27 08:50:42 +01:00
Patryk Bęza
e63d0901fa
feat(verifier): don't retry verifying permanently ignored batches
Currently, the [TEE verifier][1] – the tool for continuous SGX
attestation and batch signature verification – is [stuck][2] on batches
that failed to be proven and are marked as `permanently_ignored`. The
tool should be able to distinguish between batches that are permanently
ignored (and should be skipped) and batches that have failed but will be
retried. This PR enables that distinction.

This commit goes hand in hand with the following PR:
https://github.com/matter-labs/zksync-era/pull/3321

[1]: https://github.com/matter-labs/teepot/blob/main/bin/verify-era-proof-attestation/src/main.rs
[2]: https://grafana.matterlabs.dev/goto/unFqf57Hg?orgId=1
2024-11-26 17:19:55 +01:00
Harald Hoyer
1a8a9f17fa
Merge pull request #212 from matter-labs/logging
feat(logging): centralize logging setup in teepot crate
2024-09-18 16:38:39 +02:00
Harald Hoyer
af3ab51320
feat(logging): centralize logging setup in teepot crate
- Added a new logging module in `teepot` crate.
- Removed redundant logging setup code from individual projects.
- Updated dependencies and references for logging setup.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-09-18 16:08:13 +02:00
Harald Hoyer
2ff3b1168d
Merge pull request #210 from matter-labs/crane
fix(flake.nix): remove redundant crane input follow
2024-09-18 15:46:41 +02:00
Harald Hoyer
b7f4828a6d
Merge branch 'main' into crane 2024-09-18 15:36:26 +02:00
Harald Hoyer
7c61f81137
Merge pull request #211 from matter-labs/magix_nix_cache
ci: remove magic nix cache
2024-09-18 15:36:15 +02:00
Harald Hoyer
69ae1d39e3
Merge branch 'main' into magix_nix_cache 2024-09-18 15:24:08 +02:00
Harald Hoyer
538782e1f9
Merge pull request #209 from matter-labs/feat/hex-serialization
feat(tee): use hex deserialization for RPC requests
2024-09-18 15:22:43 +02:00