mirror of
https://github.com/edgelesssys/constellation.git
synced 2024-12-17 03:44:56 -05:00
26 lines
736 B
Go
26 lines
736 B
Go
|
/*
|
||
|
|
Copyright (c) Edgeless Systems GmbH
|
||
|
|
|
||
|
|
SPDX-License-Identifier: AGPL-3.0-only
|
||
|
|
*/
|
||
|
|
|
||
|
|
/*
|
||
|
|
package tdx implements attestation for TDX on Azure.
|
||
|
|
|
||
|
|
Quotes are generated using an Azure provided vTPM and the IMDS API.
|
||
|
|
They are verified using the go-tdx-guest library.
|
||
|
|
|
||
|
|
More specifically:
|
||
|
|
- The vTPM is used to collected a TPM attestation and a Hardware Compatibility Layer (HCL) report.
|
||
|
|
- The HCL report is sent to the IMDS API to generate a TDX quote.
|
||
|
|
- The quote is verified using the go-tdx-guest library.
|
||
|
|
- The quote's report data can be used to verify the TPM's attestation key.
|
||
|
|
- The attestation key can be used to verify the TPM attestation.
|
||
|
|
*/
|
||
|
|
package tdx
|
||
|
|
|
||
|
|
type instanceInfo struct {
|
||
|
|
AttestationReport []byte
|
||
|
|
RuntimeData []byte
|
||
|
|
}
|