maa

Documentation

Index

• func Attest(ctx context.Context, nonce []byte, maaURL string, httpClient HttpClient) (string, error)
• func DecryptToken(token string, tpmHandle io.ReadWriter) (string, error)
• func GetEncryptedToken(ctx context.Context, params Parameters, nonce []byte, maaURL string, ...) (string, error)
• func GetKeySet(ctx context.Context, maaURL string, httpClient HttpClient) ([]byte, error)
• func ValidateToken(token string, keySet []byte) (map[string]interface{}, error)
• type Attestation
• type HttpClient
• type Parameters
  • func NewParameters(ctx context.Context, nonce []byte, httpClient HttpClient, ...) (Parameters, error)
• type Quote

Functions

func Attest

func Attest(ctx context.Context, nonce []byte, maaURL string, httpClient HttpClient) (string, error)

Attest requests a JWT token from MAA for the current machine.

This function combines NewParameters, GetEncryptedToken, and DecryptToken.

func DecryptToken

func DecryptToken(token string, tpmHandle io.ReadWriter) (string, error)

DecryptToken decrypts a token received from MAA.

This function uses the TPM for decryption and thus it must be called on the same machine that created the attestation parameters via NewParameters. The PCR state must still be the same.

Optionally pass an opened TPM. If tpmHandle is nil, the default TPM will be opened.

func GetEncryptedToken

func GetEncryptedToken(ctx context.Context, params Parameters, nonce []byte, maaURL string, httpClient HttpClient) (string, error)

GetEncryptedToken requests a token from MAA, which will be encrypted.

func GetKeySet

func GetKeySet(ctx context.Context, maaURL string, httpClient HttpClient) ([]byte, error)

GetKeySet gets the key set required to validate an MAA token.

func ValidateToken

func ValidateToken(token string, keySet []byte) (map[string]interface{}, error)

ValidateToken validates an MAA token and returns the claims.

Types

type Attestation

type Attestation = attest.Attestation

type HttpClient

type HttpClient interface {
	Do(*http.Request) (*http.Response, error)
}

type Parameters

type Parameters struct {
	SNPReport         []byte
	RuntimeData       []byte
	VcekCert          []byte
	VcekChain         []byte
	Attestation       *Attestation
	EncKey            []byte
	EncKeyCertInfo    []byte
	EncKeyCertInfoSig []byte
}

func NewParameters

func NewParameters(ctx context.Context, nonce []byte, httpClient HttpClient, tpmHandle io.ReadWriter) (Parameters, error)

NewParameters collects all data that the MAA requires from the issuer's system.

Optionally pass an opened TPM. If tpmHandle is nil, the default TPM will be opened.

type Quote

type Quote = ptpm.Quote