Student ID: 3762380

Each instance that you launch in AWS has an instance identity document that provides information about the instance itself. The instance identity document is generated when the instance is launched and it is exposed (in plaintext) through the Instance Metadata Service. AWS use the ECC NIST P-256 Signature Standard to sign and verify the instance identity document as shown in Figure 3. Figure 3. Cloud Instance Identity Document Verification Assume that you are a manager of AWS. To sign and verify the instance identity document with ECC NIST P-256 Signature Standard, you choose a private key for AWS, compute the corresponding public kev and make it known to all cloud users. When a cloud user creates an instance, AWS signs the instance identity document. Everyone can verify the signature of AWS on the instance identity document. Suppose that AWS uses ECC NIST P-256 Signature Standard over an elliptic curve y2=x3+7(modp) and a generator P=(xa,x), where x=55066263022277343669578718895168534326250603453777594175500187360389116729240y=32670510020758816978083085130507043184471273380659243275938904335757337482424p=115792089237316195423570985008687907853269984665640564039457584007908834671663q=115792089237316195423570985008687907852837564279074904382605163141518161494337 (1) Verify if (x,x) belongs to the elliptic curve. (2) Assume that the private key of ECC NIST P-256 Signature Standard for AWS is your student ID, compute the corresponding public key. (3) Generate an ECC NIST P-256 Signature on the following instance identity document: "devpayProductCodes" : null, "marketplaceProductCodes" : [ "1abc2defghijklm3nopqrs4tu" ], "availabilityZone" : "us-west-2b", "privatelp" : "10.158.112.84", "version" : "2017-09-30", "billingProducts" : null, "instanceType" : "t2 micro", "accountld" : "123456789012", "imageld" : "ami-5fb8c835", "pendingTime" : "2020-07-20M16:32:112", "architecture" : "x86_64", "kernelld" : null, "ramdiskld" : null, "region" : "us-west-2" (4) Verify the signature ( generated in (3) ) with the public key of AWS. (5) Analyse the authentication of the instance identity document