extractsev

Documentation

Overview

Package extractsev provides utilities for extracting SEV-SNP endorsements.

Index

• Variables
• func FromAttestation(at *spb.Attestation) ([]byte, error)
• func FromCertTable(table []byte) ([]byte, error)
• func GCETcbObjectName(familyID string, measurement []byte) string

Variables

var (
	// ErrNotInExtras is returned when the GCE endorsement is not in the certificate chain extras.
	ErrNotInExtras = errors.New("GCE endorsement not in certificate chain extras")
)

Functions

func FromAttestation

func FromAttestation(at *spb.Attestation) ([]byte, error)

FromAttestation returns the contents of the SEV-SNP auxblob entry for the GCE UEFI endorsement.

func FromCertTable

func FromCertTable(table []byte) ([]byte, error)

FromCertTable returns the contents of the certificate table entry for the GCE UEFI endorsement.

func GCETcbObjectName

func GCETcbObjectName(familyID string, measurement []byte) string

GCETcbObjectName returns the expected object name within a GCS bucket for a firmware measured for SEV-SNP.