firmware

type Bundle struct {
	// Checkpoint is an append-only commitment from the log that includes the
	// Manifest as a leaf.
	Checkpoint []byte
	// Index is the position in the log that Manifest is committed to as a leaf.
	Index uint64
	// InclusionProof is a chain of hashes that proves that Manifest is the
	// leaf at Index in the log committed to by Checkpoint.
	InclusionProof [][]byte
	// Manifest is the metadata about Firmware, including its type, provenance,
	// and semantic version. This includes a hash of Firmware, which binds this
	// executable to Checkpoint.
	Manifest []byte
	// Firmware is the elf executable data committed to by Manifest.
	Firmware []byte
	// HABSignature holds the signature bytes, if applicable to this firmware type.
	HABSignature []byte
}

type BundleVerifier struct {
	// LogOrigin identifies the expected FT log for manifests to be submitted to.
	LogOrigin string
	// LogVerifier can verify signatures from the expected FT log.
	LogVerifer note.Verifier
	// ManifestVerifiers is a list of verifiers to use when verifying signatures over manifests.
	// ALL verifiers are expected to succeed - i.e. there must be a matching signature present
	// on the manifest for every verifier in this list.
	ManifestVerifiers []note.Verifier
}

type Config struct {
	// Offset is the MMC/SD card offset in bytes to an ELF unikernel image (e.g. TamaGo).
	Offset int64
	// Size is the unikernel length in bytes.
	Size int64
	// Signatures are the unikernel signify/minisign signatures.
	Signatures [][]byte
	// Bundle contains firmware transparency artefacts relating to the firmware this config
	// references.
	Bundle Bundle
}