SecureGame

This is a simple game inspired by the classic video game Pong, but with a special twist - its game logic is implemented inside a VBS enclave.

Read the blog post to learn more:

• Using VBS enclaves for anti-cheat purposes

Project

Project contains a single solution with two projects:

• SecureGame - The main process responsible for hosting the enclave, creating the window, querying player input and rendering using SDL2
• SecureCore - VBS enclave library (.DLL) implementing the core game functionality and storing the game runtime data

Compiling

You will need:

• Visual Studio 2022 version 17.9 or later
• Windows Software Development Kit (SDK) version 10.0.22621.3233 or later
• vcpkg installed and configured to be used with MSBuild

Then just open SecureGame.sln and compile both SecureCore and SecureGame.

Testing

You will need:

• Windows 11 or later or Windows Server 2019 or later
• VBS/HVCI must be enabled
• Test-signing must be enabled

The enclave library must be signed with a testing certificate. You can create and use a self-signed certificate:

New-SelfSignedCertificate -CertStoreLocation Cert:\\CurrentUser\\My -DnsName "MyTestEnclaveCert" -KeyUsage DigitalSignature -KeySpec Signature -KeyLength 2048 -KeyAlgorithm RSA -HashAlgorithm SHA256 -TextExtension "2.5.29.37={text}1.3.6.1.5.5.7.3.3,1.3.6.1.4.1.311.76.57.1.15,1.3.6.1.4.1.311.97.814040577.346743379.4783502.105532346"

And then use SignTool to sign the library:

signtool sign /ph /fd SHA256 /n "MyTestEnclaveCert" SecureCore.dll

Please note that you must create the certificate with the above command on your test machine (or test VM), or you'll need to export it and import it into the trusted certificate store on that machine.