Teaching git to Sign Inside an Enclave

Last post I built up an AWS Nitro Enclave that generates an ed25519 signing key it won’t let anyone read, serves it over TLS, and proves — by attestation — exactly which code is holding that key. We ended with an encrypted channel to a box we can trust, and a public key we’ve verified. Now the cheeky part: getting git to sign with that key, without patching git , without a custom credential…