constellation/joinservice/internal
Otto Bittner 7c5556864b AB#2333: Add AMD SNP-based attestation
Currently only available on Azure CVMs.

* Get the public attestation key from the TPM.
* Get the snp report from the TPM.
* Get the VCEK and ASK certificate from the metadata api.
* Verify VCEK using hardcoded root key (ARK)
* Verify SNP report using VCEK
* Verify HCLAkPub using SNP report by comparing
AK with runtimeData
* Extend unittest

Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
Co-authored-by: Daniel Weiße <dw@edgeless.systems>
2022-08-29 16:29:33 +02:00
..
kms Generate random salt for key derivation on init (#309) 2022-07-29 09:52:47 +02:00
kubeadm Simplify node lock and various small changes 2022-07-14 17:25:18 +02:00
kubernetesca AB#2333: Add AMD SNP-based attestation 2022-08-29 16:29:33 +02:00
server Switch to Azure CVMs 2022-08-19 14:39:36 +02:00