attest

Nov 9, 2023

Changes in this version

type AK

+ func (k *AK) ActivateCredentialWithEK(tpm *TPM, in EncryptedCredential, ek EK) (secret []byte, err error)

+ func (k *AK) QuotePCRs(tpm *TPM, nonce []byte, alg HashAlg, pcrs []int) (*Quote, error)

type AKConfig

+ Parent *ParentKeyConfig

type KeyConfig

+ Parent *ParentKeyConfig

+ type ParentKeyConfig struct

+ Algorithm Algorithm

+ Handle tpmutil.Handle

type TPM

+ func (t *TPM) EKCertificates() ([]EK, error)

+ func (t *TPM) LoadAKWithParent(opaqueBlob []byte, parent ParentKeyConfig) (*AK, error)

Jun 21, 2023

Changes in this version

+ type ActivateOpts struct

+ EK crypto.PublicKey

+ VerifierKeyNameDigest *tpm2.HashValue

+ func NewActivateOpts(verifierPubKey tpm2.Public, ek crypto.PublicKey) (*ActivateOpts, error)

type CertificationParameters

+ func (p *CertificationParameters) Generate(rnd io.Reader, verifyOpts VerifyOpts, activateOpts ActivateOpts) (secret []byte, ec *EncryptedCredential, err error)

Jan 31, 2022

Changes in this version

+ func AppendEvents(base []byte, additional ...[]byte) ([]byte, error)

type AK

+ func (k *AK) Certify(tpm *TPM, handle interface{}) (*CertificationParameters, error)

type AKPublic

+ func (a *AKPublic) VerifyAll(quotes []Quote, pcrs []PCR, nonce []byte) error

+ type Algorithm string

+ const ECDSA

+ const RSA

+ type DriverLoadSource uint8

+ const PciMmioSource

+ const UnknownSource

type KeyConfig

+ Algorithm Algorithm

+ Size int

type PCR

+ func (p *PCR) QuoteVerified() bool

type SecurebootState

+ DMAProtectionDisabled bool

+ DriverLoadSourceHints []DriverLoadSource

+ type Ternary uint8

+ const TernaryFalse

+ const TernaryTrue

+ const TernaryUnknown

Apr 14, 2021 GO-2022-0294

  GO-2022-0294: Improper input validation in github.com/google/go-attestation

Apr 13, 2021 GO-2022-0294

  GO-2022-0294: Improper input validation in github.com/google/go-attestation

Changes in this version

type WinEvents

+ ColdBoot bool

Apr 2, 2021 GO-2022-0294

  GO-2022-0294: Improper input validation in github.com/google/go-attestation

Apr 2, 2021 GO-2022-0294

  GO-2022-0294: Improper input validation in github.com/google/go-attestation

Changes in this version

+ type CertificationParameters struct

+ CreateAttestation []byte

+ CreateData []byte

+ CreateSignature []byte

+ Public []byte

+ func (p *CertificationParameters) Verify(opts VerifyOpts) error

+ type Key struct

+ func (k *Key) Blobs() (pub, priv []byte, err error)

+ func (k *Key) CertificationParameters() CertificationParameters

+ func (k *Key) Close() error

+ func (k *Key) Marshal() ([]byte, error)

+ func (k *Key) Private(pub crypto.PublicKey) (crypto.PrivateKey, error)

+ func (k *Key) Public() crypto.PublicKey

+ type KeyConfig struct

type TPM

+ func (t *TPM) LoadKey(opaqueBlob []byte) (*Key, error)

+ func (t *TPM) NewKey(ak *AK, opts *KeyConfig) (*Key, error)

+ type VerifyOpts struct

+ Hash crypto.Hash

+ Public crypto.PublicKey

Dec 14, 2020 GO-2022-0294

  GO-2022-0294: Improper input validation in github.com/google/go-attestation

Changes in this version

type EventLog

+ func (e *EventLog) Events(hash HashAlg) []Event

type EventType

+ func (e EventType) String() string

type ReplayError

+ InvalidPCRs []int

Nov 19, 2020 GO-2022-0294

  GO-2022-0294: Improper input validation in github.com/google/go-attestation

Changes in this version

+ const BitlockerStatusCached

+ const BitlockerStatusExternal

+ const BitlockerStatusMedia

+ const BitlockerStatusPin

+ const BitlockerStatusRecovery

+ const BitlockerStatusTPM

+ type BitlockerStatus uint8

type TPM — linux/amd64

+ func InjectSimulatedTPMForTest(rwc io.ReadWriteCloser) *TPM

+ type WinCSPAlg uint32

+ const WinAlgMD4

+ const WinAlgMD5

+ const WinAlgSHA1

+ const WinAlgSHA256

+ const WinAlgSHA384

+ const WinAlgSHA512

+ type WinELAM struct

+ Config []byte

+ Measured []byte

+ Policy []byte

+ type WinEvents struct

+ BitlockerUnlocks []BitlockerStatus

+ BootCount int

+ BootDebuggingEnabled bool

+ CodeIntegrityEnabled bool

+ DEPEnabled bool

+ ELAM map[string]WinELAM

+ KernelDebugEnabled bool

+ LoadedModules map[string]WinModuleLoad

+ TestSigningEnabled bool

+ func ParseWinEvents(events []Event) (*WinEvents, error)

+ type WinModuleLoad struct

+ AuthenticodeHash []byte

+ AuthorityIssuer string

+ AuthorityPublisher string

+ AuthoritySHA1 []byte

+ AuthoritySerial []byte

+ FilePath string

+ HashAlgorithm WinCSPAlg

+ ImageBase []uint64

+ ImageSize uint64

+ ImageValidated bool

May 5, 2020 GO-2022-0294

  GO-2022-0294: Improper input validation in github.com/google/go-attestation

Changes in this version

+ type CommandChannelTPM20 interface

+ MeasurementLog func() ([]byte, error)

type OpenConfig

+ CommandChannel CommandChannelTPM20

type TPMInterface

+ const TPMInterfaceCommandChannel

May 1, 2020 GO-2022-0294

  GO-2022-0294: Improper input validation in github.com/google/go-attestation

Changes in this version

+ type SecurebootState struct

+ Enabled bool

+ ExchangeKeyHashes [][]byte

+ ExchangeKeys []x509.Certificate

+ ForbiddenHashes [][]byte

+ ForbiddenKeys []x509.Certificate

+ PermittedHashes [][]byte

+ PermittedKeys []x509.Certificate

+ PlatformKeyHashes [][]byte

+ PlatformKeys []x509.Certificate

+ PostSeparatorAuthority []x509.Certificate

+ PreSeparatorAuthority []x509.Certificate

+ func ParseSecurebootState(events []Event) (*SecurebootState, error)

Dec 4, 2019 GO-2022-0294

  GO-2022-0294: Improper input validation in github.com/google/go-attestation

Changes in this version

+ type AK struct

+ func (k *AK) ActivateCredential(tpm *TPM, in EncryptedCredential) (secret []byte, err error)

+ func (k *AK) AttestationParameters() AttestationParameters

+ func (k *AK) Close(t *TPM) error

+ func (k *AK) Marshal() ([]byte, error)

+ func (k *AK) Quote(tpm *TPM, nonce []byte, alg HashAlg) (*Quote, error)

+ type AKConfig struct

+ type AKPublic struct

+ Hash crypto.Hash

+ Public crypto.PublicKey

+ func ParseAKPublic(version TPMVersion, public []byte) (*AKPublic, error)

+ func (a *AKPublic) Verify(quote Quote, pcrs []PCR, nonce []byte) error

type ActivationParameters

+ AK AttestationParameters

type EventLog

+ Algs []HashAlg

type HashAlg

+ func (a HashAlg) String() string

+ type PlatformAttestConfig struct

+ EventLog []byte

+ type PlatformParameters struct

+ EventLog []byte

+ PCRs []PCR

+ Public []byte

+ Quotes []Quote

+ TPMVersion TPMVersion

+ type ReplayError struct

+ Events []Event

+ func (e ReplayError) Error() string

+ type TPM struct — darwin/amd64, js/wasm

+ func OpenTPM(config *OpenConfig) (*TPM, error)

+ func (t *TPM) AttestPlatform(ak *AK, nonce []byte, config *PlatformAttestConfig) (*PlatformParameters, error)

+ func (t *TPM) Close() error

+ func (t *TPM) EKs() ([]EK, error)

+ func (t *TPM) Info() (*TPMInfo, error)

+ func (t *TPM) LoadAK(opaqueBlob []byte) (*AK, error)

+ func (t *TPM) MeasurementLog() ([]byte, error)

+ func (t *TPM) NewAK(opts *AKConfig) (*AK, error)

+ func (t *TPM) PCRs(alg HashAlg) ([]PCR, error)

+ func (t *TPM) Version() TPMVersion

Sep 6, 2019 GO-2022-0294

  GO-2022-0294: Improper input validation in github.com/google/go-attestation

Changes in this version

+ var ErrTPM12NotImplemented = errors.New("TPM 1.2 support not yet implemented")

+ var ErrTPMNotAvailable = errors.New("TPM device not available")

+ var HashSHA1 = HashAlg(tpm2.AlgSHA1)

+ var HashSHA256 = HashAlg(tpm2.AlgSHA256)

+ func ParseEKCertificate(ekCert []byte) (*x509.Certificate, error)

+ type AIK struct

+ func (k *AIK) ActivateCredential(tpm *TPM, in EncryptedCredential) (secret []byte, err error)

+ func (k *AIK) AttestationParameters() AttestationParameters

+ func (k *AIK) Close(t *TPM) error

+ func (k *AIK) Marshal() ([]byte, error)

+ func (k *AIK) Quote(tpm *TPM, nonce []byte, alg HashAlg) (*Quote, error)

+ type AIKConfig struct

+ type AIKPublic struct

+ Hash crypto.Hash

+ Public crypto.PublicKey

+ func ParseAIKPublic(version TPMVersion, public []byte) (*AIKPublic, error)

+ func (a *AIKPublic) Verify(quote Quote, pcrs []PCR, nonce []byte) error

+ type ActivationParameters struct

+ AIK AttestationParameters

+ EK crypto.PublicKey

+ Rand io.Reader

+ TPMVersion TPMVersion

+ func (p *ActivationParameters) Generate() (secret []byte, ec *EncryptedCredential, err error)

+ type AttestationParameters struct

+ CreateAttestation []byte

+ CreateData []byte

+ CreateSignature []byte

+ Public []byte

+ UseTCSDActivationFormat bool

+ type EK struct

+ Certificate *x509.Certificate

+ CertificateURL string

+ Public crypto.PublicKey

+ type EncryptedCredential struct

+ Credential []byte

+ Secret []byte

+ type Event struct

+ Data []byte

+ Digest []byte

+ Index int

+ Type EventType

+ type EventLog struct

+ func ParseEventLog(measurementLog []byte) (*EventLog, error)

+ func (e *EventLog) Verify(pcrs []PCR) ([]Event, error)

+ type EventType uint32

+ type HashAlg uint8

+ type OpenConfig struct

+ TPMVersion TPMVersion

+ type PCR struct

+ Digest []byte

+ DigestAlg crypto.Hash

+ Index int

+ type Quote struct

+ Quote []byte

+ Signature []byte

+ Version TPMVersion

+ type TCGVendorID uint32

+ func (id TCGVendorID) String() string

+ type TPM struct — linux/amd64, windows/amd64

+ func OpenTPM(config *OpenConfig) (*TPM, error)

+ func (t *TPM) Close() error

+ func (t *TPM) EKs() ([]EK, error)

+ func (t *TPM) Info() (*TPMInfo, error)

+ func (t *TPM) LoadAIK(opaqueBlob []byte) (*AIK, error)

+ func (t *TPM) MeasurementLog() ([]byte, error)

+ func (t *TPM) NewAIK(opts *AIKConfig) (*AIK, error)

+ func (t *TPM) PCRs(alg HashAlg) ([]PCR, error)

+ func (t *TPM) Version() TPMVersion

+ type TPMInfo struct

+ FirmwareVersionMajor int

+ FirmwareVersionMinor int

+ Interface TPMInterface

+ Manufacturer TCGVendorID

+ VendorInfo string

+ Version TPMVersion

+ func AvailableTPMs(config *OpenConfig) ([]TPMInfo, error)

+ type TPMInterface uint8

+ const TPMInterfaceDaemonManaged

+ const TPMInterfaceDirect

+ const TPMInterfaceKernelManaged

+ type TPMVersion uint8

+ const TPMVersion12

+ const TPMVersion20

+ const TPMVersionAgnostic