verifier

package
v0.3.12 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: May 19, 2023 License: Apache-2.0, BSD-3-Clause Imports: 2 Imported by: 0

Documentation

Overview

Package verifier contains clients for various attestation verifiers. It is meant for launcher use and testing; the API is not stable.

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type Challenge

type Challenge struct {
	Name   string
	Nonce  []byte
	ConnID string
}

Challenge is the response for CreateChallenge. It is used in the get challenge part of a remote attestation protocol. The challenge will be verified as part of VerifyAttestation.

type Client

type Client interface {
	CreateChallenge(ctx context.Context) (*Challenge, error)
	VerifyAttestation(ctx context.Context, request VerifyAttestationRequest) (*VerifyAttestationResponse, error)
}

Client is a common interface to various attestation verifiers.

type VerifyAttestationRequest

type VerifyAttestationRequest struct {
	Challenge      *Challenge
	GcpCredentials [][]byte
	Attestation    *attestpb.Attestation
}

VerifyAttestationRequest is passed in on VerifyAttestation. It contains the Challenge from CreateChallenge, optional GcpCredentials linked to the attestation, and the Attestation generated from the TPM.

type VerifyAttestationResponse

type VerifyAttestationResponse struct {
	ClaimsToken []byte
}

VerifyAttestationResponse is the response from a successful VerifyAttestation call.

Directories

Path Synopsis
Package fake is a fake implementation of the Client interface for testing.
Package fake is a fake implementation of the Client interface for testing.
Package rest contains the code to use the REST-based Google API
Package rest contains the code to use the REST-based Google API

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL