fabric-private-chaincode

fabric-private-chaincode copied to clipboard

**Is your feature request related to a problem? Please describe.** Currently we generate on-demand new sgx signing keys for each enclave we generate (e.g., via `common/crypto/Makefile`, `ecc_enclave/enclave/CMakeLists-common-app-enclave.txt`, and `tlcc_enclave/enclave/CMakeLists.txt`). For...

g2flyer

Guide for writing secure chaincode

3

challenges - general - _is there a good reference for fabric or more general handling issues like how to safely do cc2cc avoiding re-entrant code/DAO-style attacks, input validation, ...) -...

g2flyer

Incorrect range query readset creation and validation

1

The current code for creating range query readsets inside `shim.cpp` collects the result of a range query and add them. In case the result of the query is empty, nothing...

mbrandenburger

Enhance TLCC testing

1

Current TLCC test is not very robust and in many cases errors are only logged but no failure is thrown. Also, the current test relies on pre-create static test blocks...

mbrandenburger

fix test in tlcc_enclave

1

make tlcc test case reproducible (or at least documented) and adapt to cover case which caused issue #139. Note currently the test is disabled in PR #144

g2flyer

Right now we stop once we verify that an endorsement has a matching certificate grounded in any root-ca. We should make sure that the certificate is grounded in the root...

g2flyer

should be relatively straightforward - TrustedLedgerCC needs a map channelname -> enclave rather than only enclave - getMetadata has to do stub.GetChannelID() and then pick correct enclave Note: a peer...

g2flyer

Chaincode enclave / tlcc binding.

1

When a new chaincode enclave spawns it binds itself to a given tlcc enclave using local attestation. Typically, this includes a key exchange to protect the communication between the chaincode...

mbrandenburger

Fixed (and small) maximal size of return parameters

1

Currently return parameters have a hard-coded upper-bound of 1024. We might consider making this dynamic. The obvious way would be to have a getOutputLenX function for each function X with...

g2flyer

Missing status checks for transaction commit in tests

2

In many tests, transaction invocations are triggered with the `waitForEvent` flag, to block and wait for a notification of the commit event. When the event is delivered, so is the...

bvavala