constellation/joinservice/internal/kubernetesca
Otto Bittner 7c5556864b AB#2333: Add AMD SNP-based attestation
Currently only available on Azure CVMs.

* Get the public attestation key from the TPM.
* Get the snp report from the TPM.
* Get the VCEK and ASK certificate from the metadata api.
* Verify VCEK using hardcoded root key (ARK)
* Verify SNP report using VCEK
* Verify HCLAkPub using SNP report by comparing
AK with runtimeData
* Extend unittest

Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
Co-authored-by: Daniel Weiße <dw@edgeless.systems>
2022-08-29 16:29:33 +02:00
..
kubernetesca_test.go AB#2278 Remove hardcoded values from config (#346) 2022-08-08 11:04:17 +02:00
kubernetesca.go AB#2333: Add AMD SNP-based attestation 2022-08-29 16:29:33 +02:00