eventlog

Documentation

Overview

Package eventlog implements experimental logic for parsing the TCG event log format.

Index

• type SecureBoot
  • func ParseSecureBoot(events []attest.Event) (*SecureBoot, error)

Types

type SecureBoot

type SecureBoot struct {
	Enabled bool

	PK  []byte
	KEK []byte

	DB  []byte
	DBX []byte

	DBT []byte
	DBR []byte

	// Authority is the set of certificate that were used during secure boot
	// validation. This will be a subset of the certifiates in DB.
	Authority []byte
}

SecureBoot holds parsed PCR 7 values representing secure boot settings for the device.

func ParseSecureBoot

func ParseSecureBoot(events []attest.Event) (*SecureBoot, error)

ParseSecureBoot parses UEFI secure boot variables (PCR[7) from a verified event log.

See https://trustedcomputinggroup.org/wp-content/uploads/TCG_PCClient_Specific_Platform_Profile_for_TPM_2p0_1p04_PUBLIC.pdf#page=56