Enarx components

Enarx comprises the following components:

• Attestation
• Enarx API & core
• Enarx runtime
• Management

The following components are relevant or related to Enarx:

• Developer tools
• TLSSock

Attestation

An application which is going to run w/in Enarx needs to attest two things:

1. The hardware enclave.
2. A measurement of the Enarx run-time. This means that Red Hat may need to launch a service to abstract attestation. The way that this works is that the client requests attestation from Enarx. Enarx supplies a blob. The client forwards this to Red Hat. Red Hat will then complete attestation of the h/w environment and translate the measurements of Enarx into a something which allows you to identify the specific version of Enarx.

From the client’s point of view, the attestation steps of Enarx end up with the following two cryptographically validated assertions:

1. The enclave type and version;
2. The Enarx version and integrity. The attestation processes associated with the various hardware architectures are very different: providing a common mechanism to abstract this is expected to be a major part of the work associated with this project.