-
Notifications
You must be signed in to change notification settings - Fork 111
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Log binary hash of the loaded application #4758
Conversation
We did this in a different place before I removed it in project-oak#4755. I think it's nice to keep.
oak_restricted_kernel/src/lib.rs
Outdated
let app_digest = oak_restricted_kernel_dice::measure_app_digest(&application_bytes); | ||
|
||
log::info!( | ||
"Binary hash: {}", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
(nit) for consistency?
"Binary hash: {}", | |
"Application digest: {}", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Could you also print what hash function is used? is it sha2-256? If so, perhaps we should rename measure_app_digest
to include the hash type itself, to avoid confusion if / when we support other ones? In fact perhaps rename AppDigest
to AppDigestSha2_256
or something like that?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
+1
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks
oak_restricted_kernel/src/lib.rs
Outdated
let app_digest = oak_restricted_kernel_dice::measure_app_digest(&application_bytes); | ||
|
||
log::info!( | ||
"Binary hash: {}", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
+1
We did this in a different place before I removed it in #4755. I think it's nice to keep.