Cloud-native security in Rust with Keylime
summary
Keylime provides remote boot attestation and runtime integrity measurement for cloud nodes using a TPM; the project ports the agent ported to Rust from Python to produce a self-contained, fast binary suitable for Fedora CoreOS and similar distros. The Rust agent already uses tss-esapi wrapper for direct TPM calls, actix-web/reqwest/zmq for async comms, and openssl for crypto, and the Rust agent is about 80% complete with registration, activation and revocation implemented.
AI-written summary · about
chapters (7)
related talks
43mKeylime - An Open Source TPM Project for Remote Trust.
41mKeylime - An Open Source TPM Project for Remote Trust of IoT
38mKeylime, Securing your Slice of the Cloud.
49mKeylime: Bootstrapping and Maintaining Trust
37mKeylime: Pushing the Boundaries of Remote Attestation on the Edge
46mToward Usable Open-Source Remote Attestation for Cloud and Edge
28mSecuring Cloud-Native Workloads from the Metal Up
10mLightning Talk: Fort Kairos: A New Dawn for Secure Linux in Untrusted Environments