aws

Documentation

Overview

Package aws implements SecureBoot/PCR signers via AWS Key Management Service.

Index

• type KeySigner
  • func NewPCRSigner(ctx context.Context, kmsKeyID, awsRegion string) (*KeySigner, error)
  • func (s *KeySigner) Public() crypto.PublicKey
  • func (s *KeySigner) PublicRSAKey() *rsa.PublicKey
  • func (s *KeySigner) Sign(rand io.Reader, digest []byte, opts crypto.SignerOpts) ([]byte, error)
• type SecureBootSigner
  • func NewSecureBootSigner(ctx context.Context, kmsKeyID, awsRegion, certPath string) (*SecureBootSigner, error)
  • func (s *SecureBootSigner) Certificate() *x509.Certificate
  • func (s *SecureBootSigner) Signer() crypto.Signer

Types

type KeySigner

type KeySigner struct {
	// contains filtered or unexported fields
}

KeySigner implements measure.RSAKey interface.

KeySigner wraps Azure APIs to provide public key and crypto.Signer interface out of Azure Key Vault RSA key.

func NewPCRSigner

func NewPCRSigner(ctx context.Context, kmsKeyID, awsRegion string) (*KeySigner, error)

NewPCRSigner creates a new PCR signer from AWS settings.

func (*KeySigner) Public

func (s *KeySigner) Public() crypto.PublicKey

Public returns the public key.

func (*KeySigner) PublicRSAKey

func (s *KeySigner) PublicRSAKey() *rsa.PublicKey

PublicRSAKey returns the public key.

func (*KeySigner) Sign

func (s *KeySigner) Sign(rand io.Reader, digest []byte, opts crypto.SignerOpts) ([]byte, error)

Sign implements the crypto.Signer interface.

type SecureBootSigner

type SecureBootSigner struct {
	// contains filtered or unexported fields
}

SecureBootSigner implements pesign.CertificateSigner interface.

func NewSecureBootSigner

func NewSecureBootSigner(ctx context.Context, kmsKeyID, awsRegion, certPath string) (*SecureBootSigner, error)

NewSecureBootSigner creates a new SecureBootSigner.

func (*SecureBootSigner) Certificate

func (s *SecureBootSigner) Certificate() *x509.Certificate

Certificate returns the certificate.

func (*SecureBootSigner) Signer

func (s *SecureBootSigner) Signer() crypto.Signer

Signer returns the signer.