manifest

Oct 9, 2024

Changes in this version

type Manifest

+ func (m *Manifest) TDXValidateOpts() ([]*tdxvalidate.Options, error)

+ type ProductName string

+ const Genoa

+ const Milan

type ReferenceValues

+ TDX []TDXReferenceValues

type SNPReferenceValues

+ ProductName ProductName

+ TrustedMeasurement HexString

+ func (r SNPReferenceValues) Validate() error

+ type TDXReferenceValues struct

+ MinimumPceSvn *uint16

+ MinimumQeSvn *uint16

+ MinimumTeeTcbSvn HexString

+ MrSeam HexString

+ MrTd HexString

+ Rtrms [4]HexString

+ TdAttributes HexString

+ Xfam HexString

+ func (r TDXReferenceValues) Validate() error

+ type ValidatorOptions struct

+ ValidateOpts *snpvalidate.Options

+ VerifyOpts *verify.Options

Aug 7, 2024

Changes in this version

+ var EmbeddedReferenceValuesJSON []byte

+ func RuntimeHandler(platform platforms.Platform) (string, error)

+ type AKSReferenceValues struct

+ SNP SNPReferenceValues

+ TrustedMeasurement HexString

+ func (r AKSReferenceValues) Validate() error

+ type BareMetalTDXReferenceValues struct

+ TrustedMeasurement HexString

+ func (r BareMetalTDXReferenceValues) Validate() error

+ type EmbeddedReferenceValues map[string]ReferenceValues

+ func GetEmbeddedReferenceValues() EmbeddedReferenceValues

+ func (e *EmbeddedReferenceValues) ForPlatform(platform platforms.Platform) (*ReferenceValues, error)

type Manifest

+ func (m *Manifest) AKSValidateOpts() (*validate.Options, error)

+ type PolicyEntry struct

+ SANs []string

+ WorkloadSecretID string

type ReferenceValues

+ AKS *AKSReferenceValues

+ BareMetalTDX *BareMetalTDXReferenceValues

Jul 11, 2024

Changes in this version

+ var TrustedMeasurement = "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"

+ func DecryptSeedShare(key *rsa.PrivateKey, seedShare *userapi.SeedShare) ([]byte, error)

+ func EncryptSeedShares(seed []byte, ownerPubKeys []HexString) ([]*userapi.SeedShare, error)

+ func ExtractWorkloadOwnerPublicKey(keyData []byte) ([]byte, error)

+ func NewSeedShareOwnerPrivateKey() ([]byte, error)

+ func NewWorkloadOwnerKey() ([]byte, error)

+ func ParseSeedShareOwnerKey(pubKeyHex HexString) (*rsa.PublicKey, error)

+ func ParseSeedshareOwnerPrivateKey(keyData []byte) (*rsa.PrivateKey, error)

+ func ParseWorkloadOwnerPrivateKey(keyBytes []byte) (*ecdsa.PrivateKey, error)

type HexString

+ func ExtractSeedshareOwnerPublicKey(keyData []byte) (HexString, error)

+ func HashWorkloadOwnerKey(pubKey *ecdsa.PublicKey) HexString

+ func MarshalSeedShareOwnerKey(pubKey *rsa.PublicKey) HexString

type Manifest

+ SeedshareOwnerPubKeys []HexString

+ func DefaultAKS() Manifest

+ func (m *Manifest) SNPValidateOpts() (*validate.Options, error)

+ func (m *Manifest) Validate() error

type ReferenceValues

+ func (r ReferenceValues) Validate() error

May 15, 2024

Changes in this version

+ type HexString string

+ func NewHexString(b []byte) HexString

+ func (h HexString) Bytes() ([]byte, error)

+ func (h HexString) String() string

+ type HexStrings []HexString

+ func (l *HexStrings) ByteSlices() ([][]byte, error)

+ type Manifest struct

+ Policies map[HexString][]string

+ ReferenceValues ReferenceValues

+ WorkloadOwnerKeyDigests []HexString

+ func Default() Manifest

+ type Policy []byte

+ func NewPolicyFromAnnotation(annotation []byte) (Policy, error)

+ func (p Policy) Bytes() []byte

+ func (p Policy) Hash() HexString

+ type ReferenceValues struct

+ SNP SNPReferenceValues

+ TrustedMeasurement HexString

+ type SNPReferenceValues struct

+ MinimumTCB SNPTCB

+ type SNPTCB struct

+ BootloaderVersion SVN

+ MicrocodeVersion SVN

+ SNPVersion SVN

+ TEEVersion SVN

+ type SVN uint8

+ func (s *SVN) UnmarshalJSON(data []byte) error

+ func (s SVN) MarshalJSON() ([]byte, error)

+ func (s SVN) UInt8() uint8