provision

package

v0.9.7 Latest Latest Go to latest Published: Jan 29, 2026 License: Apache-2.0 Imports: 24 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/Fraunhofer-AISEC/cmc

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func DownloadVcek(url string) (*x509.Certificate, int, error)
func SnpCaUrl(aktype internal.AkType, codeName string) string
func SnpVcekUrl(codeName string, chipId []byte, tcbRaw uint64) string
func VerifyEk(pub, cert []byte, tpmInfo, certUrl, ekDbPath string, verifyEk bool) error
func VerifyIk(ikParams attest.CertificationParameters, akPub []byte) error
func VerifyTpmCsr(tpmPub []byte, csr *x509.CertificateRequest) error
type IntelEk
type SnpConfig
- func (s *SnpConfig) GetSnpCa(codeName string, akType internal.AkType) ([]*x509.Certificate, error)
- func (s *SnpConfig) GetVcek(codeName string, chipId []byte, tcb uint64) (*x509.Certificate, error)
type TpmConfig
type VcekInfo

Constants ¶

View Source

const (
	PEM = iota
	DER
)

Variables ¶

This section is empty.

Functions ¶

func DownloadVcek ¶ added in v0.9.5

func DownloadVcek(url string) (*x509.Certificate, int, error)

func SnpCaUrl ¶

func SnpCaUrl(aktype internal.AkType, codeName string) string

func SnpVcekUrl ¶

func SnpVcekUrl(codeName string, chipId []byte, tcbRaw uint64) string

func VerifyEk ¶

func VerifyEk(pub, cert []byte, tpmInfo, certUrl, ekDbPath string, verifyEk bool) error

func VerifyIk ¶

func VerifyIk(ikParams attest.CertificationParameters, akPub []byte) error

func VerifyTpmCsr ¶

func VerifyTpmCsr(tpmPub []byte, csr *x509.CertificateRequest) error

Types ¶

type IntelEk ¶

type IntelEk struct {
	Pubhash string `json:"pubhash"`
	Cert    string `json:"certificate"`
}

type SnpConfig ¶

type SnpConfig struct {
	VcekMutex       sync.Mutex
	VcekCacheFolder string
	Vceks           map[VcekInfo][]byte
	CaCacheFolder   string
}

func (*SnpConfig) GetSnpCa ¶

func (s *SnpConfig) GetSnpCa(codeName string, akType internal.AkType) ([]*x509.Certificate, error)

func (*SnpConfig) GetVcek ¶

func (s *SnpConfig) GetVcek(codeName string, chipId []byte, tcb uint64) (*x509.Certificate, error)

Get Vcek takes the TCB and chip ID, calculates the VCEK URL and gets the certificate in DER format from the cache or downloads it from the AMD server if not present

type TpmConfig ¶

type TpmConfig struct {
	VerifyEkCert bool
	DbPath       string
}

type VcekInfo ¶

type VcekInfo struct {
	ChipId [lenChipId]byte
	Tcb    uint64
}

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
est
estclient
estserver
selfsigned

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL