constellation/internal/attestation
Otto Bittner 9a1f52e94e Refactor init/recovery to use kms URI
So far the masterSecret was sent to the initial bootstrapper
on init/recovery. With this commit this information is encoded
in the kmsURI that is sent during init.
For recover, the communication with the recoveryserver is
changed. Before a streaming gRPC call was used to
exchanges UUID for measurementSecret and state disk key.
Now a standard gRPC is made that includes the same kmsURI &
storageURI that are sent during init.
2023-01-19 13:14:55 +01:00
..
aws Refactor enforced/expected PCRs (#553) 2022-11-24 10:57:58 +01:00
azure azure: allow a set of idkeydigest values (#991) 2023-01-18 16:49:55 +01:00
gcp dependencies: migrate go-genproto to google-cloud-go 2022-12-08 13:27:15 +01:00
idkeydigest azure: allow a set of idkeydigest values (#991) 2023-01-18 16:49:55 +01:00
measurements attestation: codegen for hardcoded measurements in go 2023-01-12 13:24:07 +01:00
qemu Refactor enforced/expected PCRs (#553) 2022-11-24 10:57:58 +01:00
simulator add license headers 2022-09-05 09:17:25 +02:00
vtpm Expand PCR selection on AWS 2022-12-12 17:45:35 +01:00
attestation_test.go Refactor init/recovery to use kms URI 2023-01-19 13:14:55 +01:00
attestation.go Refactor init/recovery to use kms URI 2023-01-19 13:14:55 +01:00