Otto Bittner 7c5556864b AB#2333: Add AMD SNP-based attestation ...

Currently only available on Azure CVMs.

* Get the public attestation key from the TPM.
* Get the snp report from the TPM.
* Get the VCEK and ASK certificate from the metadata api.
* Verify VCEK using hardcoded root key (ARK)
* Verify SNP report using VCEK
* Verify HCLAkPub using SNP report by comparing
AK with runtimeData
* Extend unittest

Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
Co-authored-by: Daniel Weiße <dw@edgeless.systems>

2022-08-29 16:29:33 +02:00

..

kubernetesca_test.go

AB#2278 Remove hardcoded values from config (#346)

2022-08-08 11:04:17 +02:00

kubernetesca.go

AB#2333: Add AMD SNP-based attestation

2022-08-29 16:29:33 +02:00