attestation

README

Attestation Document parsing and verification

Documentation

Index

• Variables
• type NSMAttestationDoc
  • func ParseNSMAttestationDoc(raw []byte) (*NSMAttestationDoc, error)
  • func (ad *NSMAttestationDoc) Verify() error

Variables

var AWSNitroEnclavesRootCertFingerprint, _ = hex.DecodeString("641a0321a3e244efe456463195d606317ed7cdcc3c1756e09893f3c68f79bb5b")

https://docs.aws.amazon.com/enclaves/latest/user/verify-root.html

Types

type NSMAttestationDoc

type NSMAttestationDoc struct {
	ModuleID    string
	Timestamp   time.Time
	Digest      string
	PCRs        map[int][]byte
	Certificate *x509.Certificate
	CABundle    []*x509.Certificate
	PublicKey   []byte
	UserData    []byte
	Nonce       []byte

	Signature []byte

	// Raw holds the original attestation bytes with signature (COSE Sign1).
	Raw []byte
	// Payload holds CBOR encoded attestation doc.
	Payload []byte
}

NSMAttestationDoc represents the structure of the attestation document.

Can be verified with 'Verify' method

func ParseNSMAttestationDoc

func ParseNSMAttestationDoc(raw []byte) (*NSMAttestationDoc, error)

ParseNSMAttestationDoc parses raw (Base64‑decoded) attestation bytes into a NSMAttestationDoc.

func (*NSMAttestationDoc) Verify

func (ad *NSMAttestationDoc) Verify() error

Signature and certificate chain verification