Documentation
¶
Index ¶
- func Attest(ctx context.Context, nonce []byte, maaURL string, httpClient HttpClient) (string, error)
- func DecryptToken(token string, tpmHandle io.ReadWriter) (string, error)
- func GetEncryptedToken(ctx context.Context, params Parameters, nonce []byte, maaURL string, ...) (string, error)
- func GetKeySet(ctx context.Context, maaURL string, httpClient HttpClient) ([]byte, error)
- func ValidateToken(token string, keySet []byte) (map[string]interface{}, error)
- type Attestation
- type HttpClient
- type Parameters
- type Quote
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func Attest ¶
func Attest(ctx context.Context, nonce []byte, maaURL string, httpClient HttpClient) (string, error)
Attest requests a JWT token from MAA for the current machine.
This function combines NewParameters, GetEncryptedToken, and DecryptToken.
func DecryptToken ¶
func DecryptToken(token string, tpmHandle io.ReadWriter) (string, error)
DecryptToken decrypts a token received from MAA.
This function uses the TPM for decryption and thus it must be called on the same machine that created the attestation parameters via NewParameters. The PCR state must still be the same.
Optionally pass an opened TPM. If tpmHandle is nil, the default TPM will be opened.
func GetEncryptedToken ¶
func GetEncryptedToken(ctx context.Context, params Parameters, nonce []byte, maaURL string, httpClient HttpClient) (string, error)
GetEncryptedToken requests a token from MAA, which will be encrypted.
Types ¶
type Attestation ¶
type Attestation = attest.Attestation
type Parameters ¶
type Parameters struct {
SNPReport []byte
RuntimeData []byte
VcekCert []byte
VcekChain []byte
Attestation *Attestation
EncKey []byte
EncKeyCertInfo []byte
EncKeyCertInfoSig []byte
}
func NewParameters ¶
func NewParameters(ctx context.Context, nonce []byte, httpClient HttpClient, tpmHandle io.ReadWriter) (Parameters, error)
NewParameters collects all data that the MAA requires from the issuer's system.
Optionally pass an opened TPM. If tpmHandle is nil, the default TPM will be opened.
Source Files
Click to show internal directories.
Click to hide internal directories.