Published measurements
PCR values of enclave images built from this repository. To check one, build
the listed commit with build/build-eif.sh and compare build/out/pcrs.json.
Note that the git commit hash is compiled into the binary (it is what
/.well-known/attestation reports as version), so every commit produces
different PCRs even when no code changed. Verify against the exact commit.
| commit | nitro-cli | PCR0 | PCR1 | PCR2 |
|---|---|---|---|---|
7f028275b1b58813ea3c757ac1944f5eb376933a |
1.5.0 | 9dc30e0a4a4d262b6efc37dd6c77aa25cb6469b8c0e1c4b4564ee8e11223d1616d7b19a9570e8ca28abaf96c42aba6ff |
4b4d5b3661b3efc12920900c80e126e4ce783c522de6c02a2a5bf7af3a2b9327b86776f188e4be1c1c404a129dbda493 |
99205c68c5a827b1765e39e80ed611fed874ae2ce6997c98c754c2d656a903beb10b3f7c06db83064d2b72528896a5c4 |
b854f7eba342e192873d74b56b1f1a1fda166e45 |
1.5.0 | b1add080c6ee763c02a0dd1c4118460df475b96eb39f3a4292ce4733e7d49024dbdd7d61ee6e54cae7d99a1720bc2878 |
4b4d5b3661b3efc12920900c80e126e4ce783c522de6c02a2a5bf7af3a2b9327b86776f188e4be1c1c404a129dbda493 |
6d632f0d7635f3352e57872d385f9c8d519ae4842ff0f0f3e202d2d45b03325742b4dee75ae4efb9a73cbc9d6acdb9f9 |
3acbea08da592c8d9f5892c8699308966f700cb4 |
1.5.0 | 0797c744603900b2604b922c72896ab09c09580f57017bfc4387bf6982c4ee49ad67d3f3f11a79b86aa5345e59d31c13 |
4b4d5b3661b3efc12920900c80e126e4ce783c522de6c02a2a5bf7af3a2b9327b86776f188e4be1c1c404a129dbda493 |
b712ce5d2750c61a67cb1de2b95977be161b321394976408727034f6987866ba194eb5072c2d0bab431cf3b2db43c625 |
d0134f80273c64a9f7ce2a9ed24f11ed5b32f939 |
1.5.0 | 3daf62961cdccc571a6eb92ac136a171d882f3af1d7b21b0963dbdb3c7c5d52d867e7ba64d84c5f9cbde353ec37f9841 |
4b4d5b3661b3efc12920900c80e126e4ce783c522de6c02a2a5bf7af3a2b9327b86776f188e4be1c1c404a129dbda493 |
866d4452d1223c9698728697a735170399cd8b046cdee1c125280ec2f9b850c162a7d0c1f9e80ea75fff4ef15daf3e33 |
3446cd2410d1f7a5ccfe4251ec93929554b8ac57 |
1.5.0 | 70116876ba16ee02c935b4e7e044e86c3cdbccfa466ac4d1daa093ab970bc28f0e4c148ed7ba63b4016ce7c6b64dcadd |
4b4d5b3661b3efc12920900c80e126e4ce783c522de6c02a2a5bf7af3a2b9327b86776f188e4be1c1c404a129dbda493 |
40d2b5a69e3158fe30bb6272d98fcb20de38492608065603945e02f1005fc90841d6d264ebdf69cb3a8b630347f136bd |
71ae143b96c03531a41e9897ffd1bacb887ac28d |
1.5.0 | 2f05046fb2590dc14d12ebfa250a169719cc8493c434549cf133750e2d78dc0c07a26713a4fd222e7869fc7e59775204 |
4b4d5b3661b3efc12920900c80e126e4ce783c522de6c02a2a5bf7af3a2b9327b86776f188e4be1c1c404a129dbda493 |
3c9bd9f11dafb45bbb45578f5dece781f208dec6083215f40f82b9f930d02936bdae71a81ab0c25b57ed34a18b27af5a |
b7d63dca3c4710a025a2cc8d6bd0ef86cfd00e3c |
1.5.0 | 874a961117ba67ad51feda4d9c02d8cb7143831638913c3cdc55491c891e1adcca0713bdaba47b4c1bb9ee2fb9a46ca5 |
4b4d5b3661b3efc12920900c80e126e4ce783c522de6c02a2a5bf7af3a2b9327b86776f188e4be1c1c404a129dbda493 |
0ebb258c059bf201bc1bb45b1e5b71a2f40968d061888fabbb80c0c12be508fe9ef68a12a2d734127eec849fa1befef6 |
2e010633fae844d0cdf14585224c9b7a17c57a33 (not reproducible, see vendor/i18n-embed-fl/PATCHED.md) |
1.5.0 | 12571e6829855895f6cc91ead8743e8c0bd2d0228bd843d0c9343b43bd1e208e711d7aa2ea76adc00bb1c4ea0f3a8edf |
4b4d5b3661b3efc12920900c80e126e4ce783c522de6c02a2a5bf7af3a2b9327b86776f188e4be1c1c404a129dbda493 |
3d34dcd066585c8b8e11ed3eab2719ee888540192e3ab49c40ea0cf57b502dd9c24f6f0367afc1fc0d7c1a6dc770f57d |
Live deployment: https://proxy.girl.surgery runs the newest row.
Baked-in policy at those commits (config/enclave.toml):
age recipient age1aprmm9ecx6ftpt0amsnn9vv6ueyhfnynj5p08w206v5wncfkccaqr9kgq5,
lock 604800 s, drand quicknet
52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971.