6.0.0 Release

[jcape]

• DCAP #2373
  • Need to design/determine cutover plan between EPID and DCAP
  • Bindgen-Based SGX Libraries sgx#52
  • Release Lang Items Crates sgx-std#2
    • Create lang-items repo under the foundation
  • New Attestation Libraries
    • Release mc-sgx-ake crate.
      • Attestation APIs mcips#63
      • Publishing Protobuf Definition Files mcips#64
      • Set up cookiecutter repo for the foundation #3070
      • Define new gRPC APIs w/ https://buf.build #3071
      • Create grpc-rs, tonic libs for protos protobufs#8
      • Consider exposing tee_qv_free_collateral as a rust API  sgx#340
      • Release DCAP verifier crates attestation#32
        • Create verifier repo in foundation #3127
        • Decide whether we want CT or not, would be ideal but don't see it as a requirement
        • Define And/Or structures attestation#6
        • Move report verification stuff into new repo attestation#7
        • Define a Display (like) trait for the Verifier errors attestation#8
          • Display traits on SGX structs sgx#319
          • Add display capability to Verifier output attestation#31
          • Implement Display traits attestation#15
        • Write DCAP-specific verification objects attestation#46
          • Selectable certificate chain verification attestation#91
          • Add Quote3Verifier attestation#97
          • Advisories-by-platform parsing (collateral) attestation#64
          • Advisories Verifier attestation#65
        • Quoting enclave ID verifier attestation#101
        • Quoting Enclave Report Body verifier attestation#106
        • Add common verifier that wraps up QE identity, TCB info, QE report body, and identities attestation#126
          • Add TrustedIdentitiesVerifier attestation#124
          • Add VerificationMessage impl to TrustedIdentitiesVerifier attestation#125
          • Add consolidated verifier
            • Add EvidenceVerifier attestation#127
            • Add verification of SignedTcbInfo to EvidenceVerifier attestation#128
            • Add QE identity verification to EvidenceVerifier attestation#129
            • Add TrustedIdentitiesVerifier to EvidenceVerifier attestation#131
            • Add Quote3Verifier into the EvidenceVerifier attestation#132
            • Add Quote3Verifier into the EvidenceVerifier attestation#132
      • Use new DCAP verifiers #3428
        • Update sim vs hw logic to be n'sync with the main MobileCoin repo sgx#372 Not needed at this time
        • Use TargetInfo from mc-sgx-core-types #3421
        • Need Ord and PartialOrd for security version types sgx#374
        • Use Report from sgx repo #3437
          • Bring in Ord and PartialEq for Report sgx#373
          • Use IsvSvn from mc-sgx-core-types #3434
          • Use ReportData from mc-sgx-core-types #3435
          • Use Attributes form mc-sgx-core-types #3438
            • This pulled Attributes out of the Ord implementation for ReportBody we need to determine if that will be needed once ReportBody is upgraded to the mc-sgx-core-types version.
          • Use ConfigId from mc-sgx-core-types #3439
            • Similar issue for Attributes, the ConfigId is no longer in the Ord implementation of ReportBody
          • Use ConfigSvn from mc-sgx-core-types #3440
          • Use CpuSvn from mc-sgx-core-types #3441
          • Use IsvProductId from mc-sgx-core-types #3442
          • Use MiscellaneousSelect from mc-sgx-core-types #3443
          • Use FamilyId from mc-sgx-core-types #3444
          • Use ExtendedProductId from mc-sgx-core-types #3445
          • Use Report and ReportBody from mc-sgx-core-types #3449
            • removed ReportBody from Reports ord implementation, need to determine if this will be needed once Report is upgraded to mc-sgx-core-types version,

              mobilecoin/attest/core/src/report.rs

              Line 82 in be640b9

              impl Ord for Report {

              Only NewEReportResponse was using ord and it was removed in Remove unused NewEReportResponse #3454
        • Add logic to handle EPID vs DCAP attestation verification report or evidence
          • Add support to serialize mc-sgx-attestation-verifier::Evidence. Unneeded serialized quote3 and collateral and that was enough. Add De/Serialize for Qoute3 sgx#367 and Add Serialize and Deserialize traits to Collateral sgx#382
          • Support decoding both evidence types #3429
          • Generate DCAP quotes in enclaves #3612
  • Port to use new APIs (rust and gRPC)
    • Pull in new SGX types #3378
    • Update interfaces to pass TrustedMeasurement #3368
      • Reshape StatusVerifierConfig
        • Create common measurement types for attestation #3369
        • Rename to TrustedMeasurement, Create common measurement types for attestation #3369
        • Move to a different module, the TrustedMeasurementSet should still persist for a JSON config, but the TrustedMeasurement type should live elsewhere as it's not dedicated to the JSON usage anymore. Trusted Identity Types #3436
        • Use dedicated ProductID and minimum SVN types from the mc-sgx-core-types crates. Currently they are both u16 and can be easily transposed. Trusted Identity Types #3436
      • Change from passing verifier to passing measurements #3375
    • Determine how to handle DEBUG_ENCLAVE attribute flag for attestation #3376
    • Handle empty array of measurements #3374
    • Refactor enclave-ake into new crate. This wasn't done and not sure what the intent of this was.
      • Session handling w/ PENDING vs ESTABLISHED
    • Consensus All of the enclaves were updated under, Generate DCAP quotes in enclaves #3612
      • New DCAP Protobufs
      • Enclave updates
    • Fog-Ingest
      • New DCAP Protobufs
      • Enclave updates
    • Fog View (Router and Store)
      • New DCAP Protobufs
      • Enclave updates
    • Fog Ledger (Router and Store)
      • New DCAP Protobufs
      • Enclave updates
    • Thick Client The verifiers were mostly changed in Replace VerificationReport With New Evidence Types #3602
    • Fog gRPC Connections
    • Full-service (verifier)
    • Mobilecoind (verifier)
    • Mobile SDKs
  • Conduct client testing
  • PCCS service We can use the azure endpoint
  • Need to get DCSV3 machines running
• Update CHANGELOG.md for 6.0.0-pre0 alphanet
• Update versions to 6.0.0-pre0 for alphanet
• Update CHANGELOG.md for 6.0.0 testnet + release
• Update versions to 6.0.0 for testnet + release
• Github Tag
• Sign Enclave
• Github Release
• Moby support for new measurements
• Signal iOS support for new measurements
• Signal Android support for new measurements
• Mixin support for new measurements
• Mainnet Launch