https://github.com/commerceblock/lockbox

Key share management in SGX secure enclaves.
https://github.com/commerceblock/lockbox

Last synced: 1 day ago
JSON representation

Key share management in SGX secure enclaves.

• Host: GitHub
• URL: https://github.com/commerceblock/lockbox
• Owner: commerceblock
• Created: 2020-10-14T10:15:38.000Z (over 3 years ago)
• Default Branch: main
• Last Pushed: 2024-04-04T13:44:52.000Z (2 months ago)
• Last Synced: 2024-04-04T14:57:10.481Z (2 months ago)
• Language: C
• Size: 6.71 MB
• Stars: 11
• Watchers: 7
• Forks: 3
• Open Issues: 1
• Metadata Files:
  • Readme: README.md

Lists

• Awesome-SGX-Open-Source - https://github.com/commerceblock/lockbox

README

        
# Lockbox

Key management in SGX secure enclaves. 

`/mercury`

Key management server for mercury layer

`/mainstay`

Mainstay transaction signing server

`/vls_hsm`

Signing server for Lightning VLS

## Docker build

### Build docker image by executing:

```bash

docker build -t commerceblock/lockbox .

```

### Run image without SGX driver:

```bash

docker run --rm -it -p 8000:8000 commerceblock/lockbox bash

cd /root/lockbox/app

```

### Run image with SGX driver:

```bash

docker run --rm -it --device /dev/isgx -p 8000:8000 commerceblock/lockbox bash

cd /root/lockbox/app

```

### Launch lockbox server

From within container:

```

LD_LIBRARY_PATH=/opt/intel/sgx-aesm-service/aesm/ /opt/intel/sgx-aesm-service/aesm/aesm_service &

```

Then:

```

cd /root/lockbox/app/target/release

```

Then:

```

./server_exec

```

## Enable SGX

To enable SGX functionality on an Intel SGX capable device, clone the follow repository:

```

git clone https://github.com/intel/sgx-software-enable.git

```

Then build the application with:

```

make

```

and enable SGX with:

```

sudo ./sgx_enable

```

Then restart the device, and confirm the SGX status with:

```

sgx_enable --status

```

## Run using docker-compose

Install `docker-compose`.

```

sudo curl -L "https://github.com/docker/compose/releases/download/1.27.4/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose

sudo chmod +x /usr/local/bin/docker-compose

docker-compose -v

```

Download the `docker-compose.yml` file in this repo. 

In the directory of the file, enter:

`docker-compose up -d`

Once pulled from docker hub and run for the first time, the enclave pubkey is in the file `/data/pub/init_pub.dat`. 

## Install SGX Driver for linux

Follow instructions on:

https://github.com/intel/linux-sgx-driver

# License 

Released under the terms of the GNU General Public License. See for more information https://opensource.org/licenses/GPL-3.0