2 Commits

Author	SHA1	Message	Date
Otto Bittner	c7d12055d1	attestation: add SNP-based attestation for aws-sev-snp (#1916) ... * config: move AMD root key to global constant * attestation: add SNP based attestation for aws * Always enable SNP, regardless of attestation type. * Make AWSNitroTPM default again There exists a bug in AWS SNP implementation where sometimes a host might not be able to produce valid SNP reports. Since we have to wait for AWS to fix this we are merging SNP attestation as opt-in feature.	2023-06-21 14:19:55 +02:00
Otto Bittner	8f21972aec	attestation: add awsSEVSNP as new variant (#1900) ... * variant: move into internal/attestation * attesation: move aws attesation into subfolder nitrotpm * config: add aws-sev-snp variant * cli: add tf option to enable AWS SNP For now the implementations in aws/nitrotpm and aws/snp are identical. They both contain the aws/nitrotpm impl. A separate commit will add the actual attestation logic.	2023-06-09 15:41:02 +02:00