client

type CertifiedKey struct {
	Handle      ContextHandle
	Pub         DPEPubKey
	Certificate []byte
}

type CertifyKeyFlags uint32

type CertifyKeyFormat uint32

type CertifyKeyReq[Digest DigestAlgorithm] struct {
	ContextHandle ContextHandle
	Flags         CertifyKeyFlags
	Format        CertifyKeyFormat
	Label         Digest
}

type CertifyKeyResp[CurveParameter Curve, Digest DigestAlgorithm] struct {
	NewContextHandle  ContextHandle
	DerivedPublicKeyX CurveParameter
	DerivedPublicKeyY CurveParameter
	Certificate       []byte
}

type CommandCode uint32

type CommandHdr struct {
	// contains filtered or unexported fields
}

type ContextHandle [16]byte

type Curve interface {
	NISTP256Parameter | NISTP384Parameter

	Bytes() []byte
}

type DPEABI[CurveParameter Curve, Digest DigestAlgorithm] struct {
	Profile      Profile
	MajorVersion uint16
	MinorVersion uint16
	VendorID     uint32
	VendorSku    uint32
	MaxTciNodes  uint32
	Flags        uint32
	// contains filtered or unexported fields
}

type DPEABI256 = DPEABI[NISTP256Parameter, SHA256Digest]

type DPEABI384 = DPEABI[NISTP384Parameter, SHA384Digest]

type DPEClient interface {
	InitializeContext(flags InitCtxFlags) (*ContextHandle, error)
	GetProfile() (*GetProfileResp, error)
	CertifyKey(handle *ContextHandle, label []byte, format CertifyKeyFormat, flags CertifyKeyFlags) (*CertifiedKey, error)
	GetCertificateChain() ([]byte, error)
	DestroyContext(handle *ContextHandle) error
	DeriveContext(handle *ContextHandle, inputData []byte, flags DeriveContextFlags, tciType uint32, targetLocality uint32) (*DeriveContextResp, error)
	RotateContextHandle(handle *ContextHandle, flags RotateContextHandleFlags) (*ContextHandle, error)
	Sign(handle *ContextHandle, label []byte, flags SignFlags, toBeSigned []byte) (*DPESignedHash, error)
}

type DPEPubKey struct {
	X []byte
	Y []byte
}

type DPESignedHash struct {
	Handle           ContextHandle
	HmacOrSignatureR []byte
	SignatureS       []byte
}

type DPETCI struct {
	CumulativeTCI []byte
	CurrentTCI    []byte
}

type DeriveContextFlags uint32

type DeriveContextReq[Digest DigestAlgorithm] struct {
	ContextHandle  ContextHandle
	InputData      Digest
	Flags          DeriveContextFlags
	TciType        uint32
	TargetLocality uint32
}

type DeriveContextResp struct {
	NewContextHandle    ContextHandle
	ParentContextHandle ContextHandle
}

type DestroyCtxCmd struct {
	// contains filtered or unexported fields
}

type DigestAlgorithm interface {
	SHA256Digest | SHA384Digest

	Bytes() []byte
}

type GetCertificateChainReq struct {
	Offset uint32
	Size   uint32
}

type GetCertificateChainResp struct {
	CertificateSize  uint32
	CertificateChain []byte
}

type GetProfileResp struct {
	Profile      Profile
	MajorVersion uint16
	MinorVersion uint16
	VendorID     uint32
	VendorSku    uint32
	MaxTciNodes  uint32
	Flags        uint32
}

type InitCtxCmd struct {
	// contains filtered or unexported fields
}

type InitCtxFlags uint32

type InitCtxResp struct {
	Handle ContextHandle
}

type NISTP256Parameter [32]byte

type NISTP384Parameter [48]byte

type Profile uint32

type RespHdr struct {
	Magic   uint32
	Status  Status
	Profile Profile
}

type RotateContextHandleCmd struct {
	Handle ContextHandle
	Flags  RotateContextHandleFlags
}

type RotateContextHandleFlags uint32

type RotatedContextHandle struct {
	NewContextHandle ContextHandle
}

type SHA256Digest [32]byte

type SHA384Digest [48]byte

type SignFlags uint32

type SignReq[Digest DigestAlgorithm] struct {
	ContextHandle ContextHandle
	Label         Digest
	Flags         SignFlags
	ToBeSigned    Digest
}

type SignResp[Digest DigestAlgorithm] struct {
	NewContextHandle ContextHandle
	HmacOrSignatureR Digest
	SignatureS       Digest
}

type Status uint32

type Support struct {
	Simulation          bool
	Recursive           bool
	AutoInit            bool
	RotateContext       bool
	X509                bool
	Csr                 bool
	IsSymmetric         bool
	InternalInfo        bool
	InternalDice        bool
	IsCA                bool
	RetainParentContext bool
}

type TestDPEInstance interface {
	Transport
	// If power control is unavailable for the given device, return false from
	// HasPowerControl and return an error from PowerOn and PowerOff. For devices
	// that don't support power control but do have reset capability, return true
	// from HasPowerControl leave PowerOn empty and execute the reset in PowerOff.
	HasPowerControl() bool
	// If supported, turns on the device or starts the emulator/simulator.
	PowerOn() error
	// If supported, turns of the device, stops the emulator/simulator, or resets.
	PowerOff() error
	// The Transport implementations are not expected to be able to set the values
	// it supports, but this function is used by tests to know how to test the DPE
	// instance.
	GetSupport() *Support
	// Whether the default context has been initialized.
	GetIsInitialized() bool
	// Set whether the default context has been initialized.
	SetIsInitialized(bool)
	// Returns a slice of all the localities the instance supports.
	GetSupportedLocalities() []uint32
	// Whether the target can artificially control the locality of the caller
	HasLocalityControl() bool
	// Sets the current locality.
	SetLocality(locality uint32)
	// Gets the current locality.
	GetLocality() uint32
	// Returns the Maximum number of the TCIs instance can have.
	GetMaxTciNodes() uint32
	// Returns the major version of the profile the instance implements.
	GetProfileMajorVersion() uint16
	// Returns the minor version of the profile the instance implements.
	GetProfileMinorVersion() uint16
	// Returns the Vendor ID of the profile.
	GetProfileVendorID() uint32
	// Returns the vendor's product SKU.
	GetProfileVendorSku() uint32
}

type Transport interface {
	// Send a command to the DPE instance.
	SendCmd(buf []byte) ([]byte, error)
}