mirror of
https://github.com/edgelesssys/constellation.git
synced 2024-12-14 18:34:31 -05:00
e350ca0f57
* Implement Azure TDX attestation primitives * Add default measurements and claims for Azure TDX * Enable Constellation on Azure TDX --------- Signed-off-by: Daniel Weiße <dw@edgeless.systems>
26 lines
736 B
Go
26 lines
736 B
Go
/*
|
|
Copyright (c) Edgeless Systems GmbH
|
|
|
|
SPDX-License-Identifier: AGPL-3.0-only
|
|
*/
|
|
|
|
/*
|
|
package tdx implements attestation for TDX on Azure.
|
|
|
|
Quotes are generated using an Azure provided vTPM and the IMDS API.
|
|
They are verified using the go-tdx-guest library.
|
|
|
|
More specifically:
|
|
- The vTPM is used to collected a TPM attestation and a Hardware Compatibility Layer (HCL) report.
|
|
- The HCL report is sent to the IMDS API to generate a TDX quote.
|
|
- The quote is verified using the go-tdx-guest library.
|
|
- The quote's report data can be used to verify the TPM's attestation key.
|
|
- The attestation key can be used to verify the TPM attestation.
|
|
*/
|
|
package tdx
|
|
|
|
type instanceInfo struct {
|
|
AttestationReport []byte
|
|
RuntimeData []byte
|
|
}
|