Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

verifiers: generate built-in claims from quotes #88

Merged
merged 1 commit into from
Sep 1, 2023

Commits on Aug 28, 2023

  1. verifiers: generate built-in claims from quotes

    In order to simplify the process of matching of Attestation Policy in user code, and to avoid user code dependencies on TEE-specific headers files / structs definitions, we convert quotes into built-in claims. These claims will be checked by user's verifier callback (verify_claims_callback) along with the user-defined claims.
    
    Now that we have categorized these claims into (user defined) custom claims and built-in claims.
    
    For built-in claims, they are:
    
    - `common_quote_type`, `common_quote`
    - `tdx_*`
    - `sgx_*`
    - `sev_snp_*`
    - `csv_*`
    
    Note that some break changes are interduced in this commit:
    
    The old claim name in tdx verifier
    ```c
        #define TDX_CLAIM_RTMR0 "rtmr0"
        #define TDX_CLAIM_RTMR1 "rtmr1"
        #define TDX_CLAIM_RTMR2 "rtmr2"
        #define TDX_CLAIM_RTMR3 "rtmr3"
    ```
    are renamed to "tdx_rtmr0", "tdx_rtmr1", "tdx_rtmr2", "tdx_rtmr3".
    
    Signed-off-by: Kun Lai <me@imlk.top>
    imlk0 committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    7a7563e View commit details
    Browse the repository at this point in the history