vtpm

Dec 12, 2022

Changes in this version

+ func GetSelectedMeasurements(open TPMOpenFunc, selection tpm2.PCRSelection) (measurements.M, error)

Nov 8, 2022

Changes in this version

+ var AWSPCRSelection = tpm2.PCRSelection

+ type AttestationLogger interface

+ Infof func(format string, args ...any)

+ Warnf func(format string, args ...any)

Oct 7, 2022

Changes in this version

+ const PCRIndexClusterID

+ const PCRIndexOwnerID

+ var AzurePCRSelection = tpm2.PCRSelection

+ var GCPPCRSelection = tpmClient.FullPcrSel(tpm2.AlgSHA256)

+ var QEMUPCRSelection = tpm2.PCRSelection

+ func GetSHA256QuoteIndex(quotes []*tpmProto.Quote) (int, error)

+ func GetSelectedPCRs(open TPMOpenFunc, selection tpm2.PCRSelection) (map[uint32][]byte, error)

+ func IsNodeBootstrapped(openTPM TPMOpenFunc) (bool, error)

+ func MarkNodeAsBootstrapped(openTPM TPMOpenFunc, clusterID []byte) error

+ func OpenNOPTPM() (io.ReadWriteCloser, error)

+ func OpenVTPM() (io.ReadWriteCloser, error)

+ func VerifyPKCS1v15(pub crypto.PublicKey, hash crypto.Hash, hashed, sig []byte) error

+ type AttestationDocument struct

+ Attestation *attest.Attestation

+ InstanceInfo []byte

+ UserData []byte

+ UserDataSignature []byte

+ type GetInstanceInfo func(tpm io.ReadWriteCloser) ([]byte, error)

+ type GetTPMAttestationKey func(tpm io.ReadWriter) (*tpmClient.Key, error)

+ type GetTPMTrustedAttestationPublicKey func(akPub []byte, instanceInfo []byte) (crypto.PublicKey, error)

+ type Issuer struct

+ func NewIssuer(openTPM TPMOpenFunc, getAttestationKey GetTPMAttestationKey, ...) *Issuer

+ func (i *Issuer) Issue(userData []byte, nonce []byte) ([]byte, error)

+ type TPMOpenFunc func() (io.ReadWriteCloser, error)

+ type ValidateCVM func(attestation AttestationDocument) error

+ type Validator struct

+ func NewValidator(expectedPCRs map[uint32][]byte, enforcedPCRs []uint32, ...) *Validator

+ func (v *Validator) Validate(attDocRaw []byte, nonce []byte) ([]byte, error)

+ type VerifyUserData func(pub crypto.PublicKey, hash crypto.Hash, hashed, sig []byte) error

+ type WarnLogger interface

+ Warnf func(format string, args ...interface{})