psa_iot

README

Endorsement Store Interface

Reference Value

{
  "scheme": "PSA_IOT",
  "type": "REFERENCE_VALUE",
  "attributes": {
    "hw-model": "RoadRunner",
    "hw-vendor": "ACME",
    "impl-id": "IllXTnRaUzFwYlhCc1pXMWxiblJoZEdsdmJpMXBaQzB3TURBd01EQXdNREU9Ig==",
    "measurement-desc": "sha-256",
    "measurement-type": "BL",
    "measurement-value": "h0KPxSKAPTEGXnvOPPA/5HUJZjHl4Hu9eg/eYMTPJcc=",
    "signer-id": "rLsRx+TaIXIFUjzkzhokWuGiOa48a/2eeHH35di66Gs=",
    "version": "2.1.0"
  }
}

Trust Anchor

{
  "scheme": "PSA_IOT",
  "type": "VERIFICATION_KEY",
  "attributes": {
    "hw-model": "RoadRunner",
    "hw-vendor": "ACME",
    "iak-pub": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6Vwqe7hy3O8Ypa+BUETLUjBNU3rEXVUyt9XHR7HJWLG7XTKQd9i1kVRXeBPDLFnfYru1/euxRnJM7H9UoFDLdA==",
    "impl-id": "IllXTnRaUzFwYlhCc1pXMWxiblJoZEdsdmJpMXBaQzB3TURBd01EQXdNREU9Ig==",
    "inst-id": "AUyj5PUL8kjDl4cCDWj/0FyIdndRvyZFypI/V6mL7NKW"
  }
}

Documentation

Overview

Copyright 2022-2024 Contributors to the Veraison project. SPDX-License-Identifier: Apache-2.0

Copyright 2022-2024 Contributors to the Veraison project. SPDX-License-Identifier: Apache-2.0

Copyright 2021-2024 Contributors to the Veraison project. SPDX-License-Identifier: Apache-2.0

Copyright 2023 Contributors to the Veraison project. SPDX-License-Identifier: Apache-2.0

Copyright 2021-2024 Contributors to the Veraison project. SPDX-License-Identifier: Apache-2.0

Index

• Constants
• Variables
• type CorimExtractor
  • func (o CorimExtractor) RefValExtractor(rv comid.ReferenceValue) ([]*handler.Endorsement, error)
  • func (o *CorimExtractor) SetProfile(profile string)
  • func (o CorimExtractor) TaExtractor(avk comid.AttestVerifKey) (*handler.Endorsement, error)
• type EndorsementHandler
  • func (o EndorsementHandler) Close() error
  • func (o EndorsementHandler) Decode(data []byte) (*handler.EndorsementHandlerResponse, error)
  • func (o EndorsementHandler) GetAttestationScheme() string
  • func (o EndorsementHandler) GetName() string
  • func (o EndorsementHandler) GetSupportedMediaTypes() []string
  • func (o EndorsementHandler) Init(params handler.EndorsementHandlerParams) error
• type EvidenceHandler
  • func (s EvidenceHandler) AppraiseEvidence(ec *proto.EvidenceContext, endorsementsStrings []string) (*ear.AttestationResult, error)
  • func (s EvidenceHandler) ExtractClaims(token *proto.AttestationToken, trustAnchors []string) (map[string]interface{}, error)
  • func (s EvidenceHandler) GetAttestationScheme() string
  • func (s EvidenceHandler) GetName() string
  • func (s EvidenceHandler) GetSupportedMediaTypes() []string
  • func (s EvidenceHandler) ValidateEvidenceIntegrity(token *proto.AttestationToken, trustAnchors []string, ...) error
• type StoreHandler
  • func (s StoreHandler) GetAttestationScheme() string
  • func (s StoreHandler) GetName() string
  • func (s StoreHandler) GetRefValueIDs(tenantID string, trustAnchors []string, claims map[string]interface{}) ([]string, error)
  • func (s StoreHandler) GetSupportedMediaTypes() []string
  • func (s StoreHandler) GetTrustAnchorIDs(token *proto.AttestationToken) ([]string, error)
  • func (s StoreHandler) SynthKeysFromRefValue(tenantID string, refValue *handler.Endorsement) ([]string, error)
  • func (s StoreHandler) SynthKeysFromTrustAnchor(tenantID string, ta *handler.Endorsement) ([]string, error)

Constants

const (
	SchemeName              = "PSA_IOT"
	CCAEndorsementMediaType = "application/corim-unsigned+cbor; profile=http://arm.com/cca/ssd/1"
)

Variables

var EndorsementMediaTypes = []string{
	"application/corim-unsigned+cbor; profile=http://arm.com/psa/iot/1",
}

var EvidenceMediaTypes = []string{
	"application/psa-attestation-token",
	"application/eat-cwt; profile=http://arm.com/psa/2.0.0",
}

Types

type CorimExtractor

type CorimExtractor struct {
	Profile string
}

func (CorimExtractor) RefValExtractor

func (o CorimExtractor) RefValExtractor(rv comid.ReferenceValue) ([]*handler.Endorsement, error)

func (*CorimExtractor) SetProfile

func (o *CorimExtractor) SetProfile(profile string)

func (CorimExtractor) TaExtractor

func (o CorimExtractor) TaExtractor(avk comid.AttestVerifKey) (*handler.Endorsement, error)

type EndorsementHandler

type EndorsementHandler struct{}

func (EndorsementHandler) Close

func (o EndorsementHandler) Close() error

func (EndorsementHandler) Decode

func (o EndorsementHandler) Decode(data []byte) (*handler.EndorsementHandlerResponse, error)

func (EndorsementHandler) GetAttestationScheme

func (o EndorsementHandler) GetAttestationScheme() string

func (EndorsementHandler) GetName

func (o EndorsementHandler) GetName() string

func (EndorsementHandler) GetSupportedMediaTypes

func (o EndorsementHandler) GetSupportedMediaTypes() []string

func (EndorsementHandler) Init

func (o EndorsementHandler) Init(params handler.EndorsementHandlerParams) error

type EvidenceHandler

type EvidenceHandler struct{}

func (EvidenceHandler) AppraiseEvidence

func (s EvidenceHandler) AppraiseEvidence(
	ec *proto.EvidenceContext, endorsementsStrings []string,
) (*ear.AttestationResult, error)

func (EvidenceHandler) ExtractClaims

func (s EvidenceHandler) ExtractClaims(
	token *proto.AttestationToken,
	trustAnchors []string,
) (map[string]interface{}, error)

func (EvidenceHandler) GetAttestationScheme

func (s EvidenceHandler) GetAttestationScheme() string

func (EvidenceHandler) GetName

func (s EvidenceHandler) GetName() string

func (EvidenceHandler) GetSupportedMediaTypes

func (s EvidenceHandler) GetSupportedMediaTypes() []string

func (EvidenceHandler) ValidateEvidenceIntegrity

func (s EvidenceHandler) ValidateEvidenceIntegrity(
	token *proto.AttestationToken,
	trustAnchors []string,
	endorsementsStrings []string,
) error

type StoreHandler

type StoreHandler struct{}

func (StoreHandler) GetAttestationScheme

func (s StoreHandler) GetAttestationScheme() string

func (StoreHandler) GetName

func (s StoreHandler) GetName() string

func (StoreHandler) GetRefValueIDs

func (s StoreHandler) GetRefValueIDs(
	tenantID string,
	trustAnchors []string,
	claims map[string]interface{},
) ([]string, error)

func (StoreHandler) GetSupportedMediaTypes

func (s StoreHandler) GetSupportedMediaTypes() []string

func (StoreHandler) GetTrustAnchorIDs

func (s StoreHandler) GetTrustAnchorIDs(token *proto.AttestationToken) ([]string, error)

func (StoreHandler) SynthKeysFromRefValue

func (s StoreHandler) SynthKeysFromRefValue(
	tenantID string,
	refValue *handler.Endorsement,
) ([]string, error)

func (StoreHandler) SynthKeysFromTrustAnchor

func (s StoreHandler) SynthKeysFromTrustAnchor(tenantID string, ta *handler.Endorsement) ([]string, error)