AWS Nitro Secure Module (NSM) interface in native Python
This library offers a native Python interface to the /dev/nsm device in AWS Nitro Enclaves. This is an updated version from aws-nsm-interface.
Installation
To install aws_nsm_interface_verifiably, run:
pip install aws_nsm_interface_verifiably
Requirements
- To install: python>=3.6
- To run: a Python application running in an AWS Nitro Enclave
Quickstart
import base64
import aws_nsm_interface_verifiably
file_desc = aws_nsm_interface_verifiably.open_nsm_device()
rand_bytes = aws_nsm_interface_verifiably.get_random(file_desc, 12) # Get 12 random bytes from /dev/nsm
print(rand_bytes)
public_rsa_key = b'1234' # An RSA public key exported as DER
attestation_doc = aws_nsm_interface_verifiably.get_attestation_doc(
file_desc,
public_key=public_rsa_key
)['document']
attestation_doc_b64 = base64.b64encode(attestation_doc).decode('utf-8')
aws_nsm_interface_verifiably.close_nsm_device(file_desc)
# Use `attestation_doc_b64` in your AWS KMS Decrypt call