Securing data integrity for an application

1. A method comprising:

receiving a request to provide an application at a secure enclave of a server;

generating a hash value of the application;

identifying an application data that is to be used with the application at the secure enclave of the server, wherein the application data corresponds to a file system;

receiving, from a user, an indication of a portion of the application data that is to be protected with the application, wherein the indication specifies one or more files included in a directory of the file system;

identifying one or more file hash values, wherein each file hash value is based on a corresponding file included in the directory of the file system;

generating another hash value based on the portion of the application data that is to be protected with the application and further based on the one or more file hash values; and

signing, by a processor, the hash value of the application and the another hash value that is based on the portion of the application data that is to be protected with the application, the signed hash value and another hash value being used to execute the application with the application data at the secure enclave of the server.

2. The method of claim 1 , wherein the signing of the hash value of the application and the another hash value of the application data is based on a cryptographic key.

3. The method of claim 1 , wherein the application data corresponds to configuration settings associated with the application.

4. The method of claim 1 , wherein generating the hash value of the application comprises:

identifying software code of the application; and

generating the hash value of the application based on the software code of the application.

5. The method of claim 1 , wherein the portion of the application data that is to be protected comprises content.

6. The method of claim 1 , wherein the

another hash value is further based on a name and metadata of each file included in the directory of the file system.

7. A system comprising:

a physical memory; and

a processor, operatively coupled with the memory, to:

receive a request to provide an application at a secure enclave of a server;

generate a hash value of the application;

identify an application data that is to be used with the application at the secure enclave of the server, wherein the application data corresponds to a file system;

receive, from a user, an indication of a portion of the application data that is to be protected with the application, wherein the indication specifies one or more files included in a directory of the file system;

identify one or more file hash values, wherein each file hash value is based on a corresponding file included in the directory of the file system;

generate another hash value based on the portion of the application data that is to be protected with the application and further based on the one or more file hash values; and

sign the hash value of the application and the another hash value that is based on the portion of the application data that is to be protected with the application, the signed hash value and another hash value being used to execute the application with the application data at the secure enclave of the server.

8. The system of claim 7 , wherein the signing of the hash value of the application and the another hash value of the application data is based on a cryptographic key.

9. The system of claim 7 , wherein the application data corresponds to configuration settings associated with the application.

10. The system of claim 7 , wherein to generate the hash value of the application, the processor is further to:

identify software code of the application; and

generate the hash value of the application based on the software code of the application.

11. The system of claim 7 , wherein the portion of the application data that is to be protected comprises content.

12. The system of claim 7 , wherein the cryptographic key is an internal cryptographic key of a processor that is providing the secure enclave.

13. A non-transitory computer readable medium comprising data that, when accessed by a processor, cause the processor to perform operations comprising:

receiving a request to provide an application at a secure enclave of a server;

generating a hash value of the application;

identifying an application data that is to be used with the application at the secure enclave of the server, wherein the application data corresponds to a file system;

receiving, from a user, an indication of a portion of the application data that is to be protected with the application, wherein the indication specifies one or more files included in a directory of the file system;

identifying one or more file hash values, wherein each file hash value is based on a corresponding file included in the directory of the file system;

generating another hash value based on the portion of the application data that is to be protected with the application and further based on the one or more file hash values; and

signing the hash value of the application and the another hash value that is based on the portion of the application data that is to be protected with the application, the signed hash value and another hash value being used to execute the application with the application data at the secure enclave of the server.

14. The non-transitory computer readable medium of claim 13 , wherein the signing of the hash value of the application and the another hash value of the application data is based on a cryptographic key.

15. The non-transitory computer readable medium of claim 13 , wherein the application data corresponds to configuration settings associated with the application.

16. The non-transitory computer readable medium of claim 15 , wherein the portion of the application data that is to be protected comprises content.

17. The non-transitory computer readable medium of claim 13 , wherein the

another hash value is further based on a name and metadata of each file included in the directory of the file system.