constellation/internal/attestation/azure/snp
Daniel Weiße f8001efbc0
Refactor enforced/expected PCRs (#553)
* Merge enforced and expected measurements

* Update measurement generation to new format

* Write expected measurements hex encoded by default

* Allow hex or base64 encoded expected measurements

* Allow hex or base64 encoded clusterID

* Allow security upgrades to warnOnly flag

* Upload signed measurements in JSON format

* Fetch measurements either from JSON or YAML

* Use yaml.v3 instead of yaml.v2

* Error on invalid enforced selection

* Add placeholder measurements to config

* Update e2e test to new measurement format

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2022-11-24 10:57:58 +01:00
..
errors.go AB#2379: Validate version in SNP report (#80) 2022-09-07 10:39:38 +02:00
imds.go AB#2386: TrustedLaunch support for azure attestation 2022-09-05 12:03:48 +02:00
issuer_test.go Feat/revive (#212) 2022-10-05 15:02:46 +02:00
issuer.go AB#2458 AWS NitroTPM attestation (#339) 2022-10-27 11:04:23 +02:00
README.md Document exported funcs,types,interfaces and enable check. (#475) 2022-11-09 15:57:54 +01:00
validator_test.go Feat/revive (#212) 2022-10-05 15:02:46 +02:00
validator.go Refactor enforced/expected PCRs (#553) 2022-11-24 10:57:58 +01:00

SNP

Glosssary

This section explains abbreviations used in SNP implementation.

Attestation Key (AK)

AMD Root Key (ARK)

AMD Signing Key (ASK)

Versioned Chip Endorsement Key (VCEK)

For more information see SNP WhitePaper

Host (Hardware?) Compatibility Layer (HCL)

No public information. Azure compute API has a field isHostCompatibilityLayerVm, with only a single sentence of documentation.