client

Feb 22, 2024

Changes in this version

+ type TdxQuoteProvider struct

+ QuoteProvider tg.QuoteProvider

+ func CreateTdxQuoteProvider() (*TdxQuoteProvider, error)

+ func (qp *TdxQuoteProvider) AddAttestation(attestation *pb.Attestation, opts AttestOpts) error

+ func (qp *TdxQuoteProvider) Close() error

Sep 15, 2023

Changes in this version

+ type TdxDevice struct

+ Device tg.Device

+ func CreateTdxDevice() (*TdxDevice, error)

+ func (d *TdxDevice) AddAttestation(attestation *pb.Attestation, opts AttestOpts) error

+ func (d *TdxDevice) Close() error

Jun 23, 2023

Changes in this version

+ type EKSession struct

+ func (e EKSession) Auth() (auth tpm2.AuthCommand, err error)

+ func (e EKSession) Close() error

type Key

+ func LoadCachedKey(rw io.ReadWriter, cachedHandle tpmutil.Handle, keySession Session) (k *Key, err error)

+ type NullSession struct

+ func (n NullSession) Auth() (auth tpm2.AuthCommand, err error)

+ func (n NullSession) Close() error

+ type PCRSession struct

+ func (p PCRSession) Auth() (auth tpm2.AuthCommand, err error)

+ func (p PCRSession) Close() error

+ type Session interface

+ Auth func() (tpm2.AuthCommand, error)

+ func NewEKSession(rw io.ReadWriter) (Session, error)

+ func NewPCRSession(rw io.ReadWriter, sel tpm2.PCRSelection) (Session, error)

May 19, 2023

Changes in this version

type AttestOpts

+ TCGEventLog []byte

Dec 16, 2022

Changes in this version

type AttestOpts

+ TEEDevice TEEDevice

+ TEENonce []byte

+ type SevSnpDevice struct

+ Device sg.Device

+ func CreateSevSnpDevice() (*SevSnpDevice, error)

+ func (d *SevSnpDevice) AddAttestation(attestation *pb.Attestation, opts AttestOpts) error

+ func (d *SevSnpDevice) Close() error

+ type TEEDevice interface

+ AddAttestation func(attestation *pb.Attestation, options AttestOpts) error

+ Close func() error

Mar 14, 2022

Changes in this version

type AttestOpts

+ CertChainFetcher *http.Client

Mar 8, 2022

Changes in this version

type AttestOpts

+ FetchCertChain bool

type Key

+ func (k *Key) SetCert(cert *x509.Certificate) error

Jan 26, 2022

Changes in this version

+ const EKCertNVIndexECC

+ const EKCertNVIndexRSA

+ const GceAKCertNVIndexECC

+ const GceAKCertNVIndexRSA

type AttestOpts

+ CanonicalEventLog []byte

type Key

+ func (k *Key) Cert() *x509.Certificate

+ func (k *Key) CertDERBytes() []byte

Oct 27, 2021

Changes in this version

+ const CertifyHashAlgTpm

+ const DefaultAKECCHandle

+ const DefaultAKRSAHandle

+ const EKECCReservedHandle

+ const EKReservedHandle

+ const GceAKTemplateNVIndexECC

+ const GceAKTemplateNVIndexRSA

+ const NumPCRs

+ const SRKECCReservedHandle

+ const SRKReservedHandle

+ const SessionHashAlg

+ const SessionHashAlgTpm

+ func AKTemplateECC() tpm2.Public

+ func AKTemplateRSA() tpm2.Public

+ func CheckedClose(tb testing.TB, rwc io.ReadWriteCloser)

+ func DefaultEKTemplateECC() tpm2.Public

+ func DefaultEKTemplateRSA() tpm2.Public

+ func FullPcrSel(hash tpm2.Algorithm) tpm2.PCRSelection

+ func GetEventLog(rw io.ReadWriter) ([]byte, error)

+ func Handles(rw io.ReadWriter, handleType tpm2.HandleType) ([]tpmutil.Handle, error)

+ func ReadAllPCRs(rw io.ReadWriter) ([]*pb.PCRs, error)

+ func ReadPCRs(rw io.ReadWriter, sel tpm2.PCRSelection) (*pb.PCRs, error)

+ func SRKTemplateECC() tpm2.Public

+ func SRKTemplateRSA() tpm2.Public

+ type AttestOpts struct

+ Nonce []byte

+ type EventLogGetter interface

+ EventLog func() ([]byte, error)

+ type Key struct

+ func AttestationKeyECC(rw io.ReadWriter) (*Key, error)

+ func AttestationKeyRSA(rw io.ReadWriter) (*Key, error)

+ func EndorsementKeyECC(rw io.ReadWriter) (*Key, error)

+ func EndorsementKeyFromNvIndex(rw io.ReadWriter, idx uint32) (*Key, error)

+ func EndorsementKeyRSA(rw io.ReadWriter) (*Key, error)

+ func GceAttestationKeyECC(rw io.ReadWriter) (*Key, error)

+ func GceAttestationKeyRSA(rw io.ReadWriter) (*Key, error)

+ func KeyFromNvIndex(rw io.ReadWriter, parent tpmutil.Handle, idx uint32) (*Key, error)

+ func NewCachedKey(rw io.ReadWriter, parent tpmutil.Handle, template tpm2.Public, ...) (k *Key, err error)

+ func NewKey(rw io.ReadWriter, parent tpmutil.Handle, template tpm2.Public) (k *Key, err error)

+ func StorageRootKeyECC(rw io.ReadWriter) (*Key, error)

+ func StorageRootKeyRSA(rw io.ReadWriter) (*Key, error)

+ func (k *Key) Attest(opts AttestOpts) (*pb.Attestation, error)

+ func (k *Key) Close()

+ func (k *Key) GetSigner() (crypto.Signer, error)

+ func (k *Key) Handle() tpmutil.Handle

+ func (k *Key) Import(blob *pb.ImportBlob) ([]byte, error)

+ func (k *Key) ImportSigningKey(blob *pb.ImportBlob) (key *Key, err error)

+ func (k *Key) Name() tpm2.Name

+ func (k *Key) PublicArea() tpm2.Public

+ func (k *Key) PublicKey() crypto.PublicKey

+ func (k *Key) Quote(selpcr tpm2.PCRSelection, extraData []byte) (*pb.Quote, error)

+ func (k *Key) Reseal(in *pb.SealedBytes, uOpts UnsealOpts, sOpts SealOpts) (*pb.SealedBytes, error)

+ func (k *Key) Seal(sensitive []byte, opts SealOpts) (*pb.SealedBytes, error)

+ func (k *Key) SignData(data []byte) ([]byte, error)

+ func (k *Key) Unseal(in *pb.SealedBytes, opts UnsealOpts) ([]byte, error)

+ type SealOpts struct

+ Current tpm2.PCRSelection

+ Target *pb.PCRs

+ type UnsealOpts struct

+ CertifyCurrent tpm2.PCRSelection

+ CertifyExpected *pb.PCRs