COCONUT-SVSM CCC Project Submission

[joergroedel]

Project Submission to the Confidential Computing Consortium

This discussion is around the submission documents required to make COCONUT-SVSM a part of the CCC.

Please help review the two documents below.

COCONUT CCC Project Submission.pdf
COCONUT-SVSM Technical Charter (custom+data) -- LF Projects, LLC 4-10-2019 FINAL (11).pdf

[osteffenrh]

COCONUT CCC Project Submission.pdf

s/RedHat/Red Hat/

[joergroedel]

Updated, thanks.

[stefano-garzarella]

In 3.6. External dependencies we list only the direct dependencies, should we list nested dependencies as well?

$ cargo license
(MIT OR Apache-2.0) AND Unicode-DFS-2016 (1): unicode-ident
Apache-2.0 OR MIT (22): aead, aes, aes-gcm, autocfg, bitflags, cfg-if, cipher, cpufeatures, crypto-common, ctr, ghash, inout, intrusive-collections, log, opaque-debug, polyval, proc-macro2, quote, syn, typenum, universal-hash, version_check
BSD-2-Clause (2): zerocopy, zerocopy-derive
BSD-3-Clause (1): subtle
MIT (2): generic-array, memoffset
MIT OR Unlicense (1): byteorder
N/A (3): packit, svsm, test

$ cargo tree
svsm v0.1.0 (/home/stefano/repos/coconut/svsm-review)
├── aes-gcm v0.10.3
│   ├── aead v0.5.2
│   │   ├── crypto-common v0.1.6
│   │   │   ├── generic-array v0.14.7
│   │   │   │   └── typenum v1.17.0
│   │   │   │   [build-dependencies]
│   │   │   │   └── version_check v0.9.4
│   │   │   └── typenum v1.17.0
│   │   └── generic-array v0.14.7 (*)
│   ├── aes v0.8.3
│   │   ├── cfg-if v1.0.0
│   │   ├── cipher v0.4.4
│   │   │   ├── crypto-common v0.1.6 (*)
│   │   │   └── inout v0.1.3
│   │   │       └── generic-array v0.14.7 (*)
│   │   └── cpufeatures v0.2.11
│   ├── cipher v0.4.4 (*)
│   ├── ctr v0.9.2
│   │   └── cipher v0.4.4 (*)
│   ├── ghash v0.5.0
│   │   ├── opaque-debug v0.3.0
│   │   └── polyval v0.6.1
│   │       ├── cfg-if v1.0.0
│   │       ├── cpufeatures v0.2.11
│   │       ├── opaque-debug v0.3.0
│   │       └── universal-hash v0.5.1
│   │           ├── crypto-common v0.1.6 (*)
│   │           └── subtle v2.5.0
│   └── subtle v2.5.0
├── bitflags v2.4.1
├── intrusive-collections v0.9.6
│   └── memoffset v0.9.0
│       [build-dependencies]
│       └── autocfg v1.1.0
├── log v0.4.20
└── packit v0.1.0 (https://github.com/coconut-svsm/packit#540b471e)
    └── zerocopy v0.6.5
        ├── byteorder v1.5.0
        └── zerocopy-derive v0.6.5 (proc-macro)
            ├── proc-macro2 v1.0.69
            │   └── unicode-ident v1.0.12
            ├── quote v1.0.33
            │   └── proc-macro2 v1.0.69 (*)
            └── syn v2.0.38
                ├── proc-macro2 v1.0.69 (*)
                ├── quote v1.0.33 (*)
                └── unicode-ident v1.0.12
[dev-dependencies]
├── memoffset v0.9.0 (*)
└── test v0.1.0 (/home/stefano/repos/coconut/svsm-review/test)

[joergroedel]

Thanks. The full dependency tree is great, but probably too big for the document. The license information is also helpful, I will add it to the document.

[vsntk18]

3.6. External dependencies : Fuzzing part depends on Arbitrary and libfuzzer-sys crates, licensed under MIT OR Apache-2.0 and MIT OR Apache-2.0 OR NCSA respectively.

[joergroedel]

Thanks, added libfuzzer-sys too