akscep

type AK struct {
	// contains filtered or unexported fields
}

type AttestationKeyCSR struct {
	SubjectPublicKey crypto.PublicKey
	SubjectKeyID     []byte
	OSVersion        string
	SCEPSignerHash   []byte
	MachineName      string
	UserName         string
	AttestationStatement
	EncryptedEKCerts []byte
	TPMInfo
}

type AttestationKeyChallenge struct {
	CredentialBlob    []byte
	Secret            []byte
	ServerContextBlob asn1.RawValue
}

type AttestationKeyChallengeHdr struct {
	Magic         uint32
	Version       uint32
	Platform      uint32
	HeaderSize    uint32
	ChallengeSize uint32
	Reserved      uint32
}

type AttestationStatement struct {
	Header AttestationStatementHdr
	IDBinding
	KeyAttestation []byte
	AIKOpaque      []byte
}

type AttestationStatementHdr struct {
	Magic              uint32
	Version            uint32
	Platform           uint32
	HeaderSize         uint32
	IDBindingSize      uint32
	KeyAttestationSize uint32
	AIKOpaqueSize      uint32
}

type ClientContext struct {
	// contains filtered or unexported fields
}

type CreationAttestation struct {
	CreationData tpm2.CreationData
	Attest       tpm2.AttestationData
	// This could be a tpm2.Signature, if an Encode() function were available for that type.
	// TODO: add that, and upstream it.
	SignatureAlg tpm2.Algorithm
	Signature    tpm2.SignatureRSA
}

type GetCertInner struct {
	EKChallenge struct {
		OID        asn1.ObjectIdentifier
		InnerPKCS7 struct {
			EncryptedChallenge asn1.RawValue
		} `asn1:"set"`
	}
	ServerContext asn1.RawValue
}

type GetCertReq struct {
	Envelope *pkcs7.PKCS7
	Contents *pkcs7.PKCS7
}

type GetCertReqBuilder struct {
	Challenge          *AttestationKeyChallenge
	DecryptedChallenge []byte
	SignerCert         *x509.Certificate
	SignerKey          crypto.PrivateKey
	RecipientCert      *x509.Certificate
}

type GetCertRsp struct {
	Envelope *pkcs7.PKCS7
	Contents *pkcs7.PKCS7
}

type GetCertRspBuilder struct {
	Cert          []byte
	SignerCert    *x509.Certificate
	SignerKey     crypto.PrivateKey
	RecipientCert *x509.Certificate
}

type GetChallengeReply struct {
	EKChallenge struct {
		OID      asn1.ObjectIdentifier
		Contents struct {
			Challenge []byte
		} `asn1:"set"`
	}
	ServerContext asn1.RawValue
}

type GetChallengeReq struct {
	Envelope *pkcs7.PKCS7
	Contents *pkcs7.PKCS7
}

type GetChallengeReqBuilder struct {
	Claims        []byte
	ExtraEKCerts  []*x509.Certificate
	SignerCert    *x509.Certificate
	SignerKey     crypto.PrivateKey
	RecipientCert *x509.Certificate
}

type GetChallengeRsp struct {
	Envelope *pkcs7.PKCS7
	Contents *pkcs7.PKCS7
}

type GetChallengeRspBuilder struct {
	Challenge     []byte
	SenderNonce   []byte
	TransactionID string
	SignerCert    *x509.Certificate
	SignerKey     crypto.PrivateKey
	RecipientCert *x509.Certificate
}

type IDBinding struct {
	Public tpm2.Public
	CreationAttestation
}

type TPMInfo struct {
	Manufacturer []byte
	Model        string
	Version      []byte
}