Skip to content

add secure enclave signing - #2141

Draft
James-Pickett wants to merge 3 commits into
kolide:mainfrom
James-Pickett:james/secure-enclave-sign
Draft

add secure enclave signing#2141
James-Pickett wants to merge 3 commits into
kolide:mainfrom
James-Pickett:james/secure-enclave-sign

Conversation

@James-Pickett

@James-Pickett James-Pickett commented Mar 5, 2025

Copy link
Copy Markdown
Contributor


var err error
if runtime.GOOS != "darwin" && agent.HardwareKeys() != nil && agent.HardwareKeys().Public() != nil {
if agent.HardwareKeys() != nil && agent.HardwareKeys().Public() != nil {

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

if we get an error here signing with hardware keys ... should we just fall back to signing without?

w.Write(keyBytes)
}

func (s *UserServer) signWithSecureEnclave(w http.ResponseWriter, r *http.Request) {

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

TODOS

  • verify krypto box from server
  • add timestamp and nonce

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants