Skip to content

Commit 6c0e266

Browse files
kwtj43yzz127arvind5jerryrhyu
authored
Adds UEFI/IMA Log evidence collection to the ITA go-client (#150)
* CASSINI-8033: Support Azure TDX report generation in Amber client CLI (intel#43) * Updated Azure adapter per TDX1.4 preview. * resolve tpm read issue - paravisor only update report when read full region Signed-off-by: Jerry Yu <jerry.yu@intel.com> * Removed GET nonce call to TrustAuthority. * update README * define nv index 0x1400002 if not yet Signed-off-by: Jerry Yu <jerry.yu@intel.com> * verify user data hash in the evidence Ensure the collected evidence matches the user data(hash) provided to the vTPM * use nonce to validate the evidence freshness * print out base64 encoded evidence (#97) Signed-off-by: Jerry Yu <jerry.yu@intel.com> * Modified Connector to use new attestation end-point for Azure tdvm. (#100) * Add sleep time of 3 sec to reflect user data in runtime data. * Updated Azure adapter per TDX1.4 preview. * Modified Connector to use new attestation end-point for Azure tdvm. (#100) * parent e50e871 author Kent Thompson <kent.thompson@intel.com> 1713878404 -0700 committer Thompson, Kent <kent.thompson@intel.com> 1726845567 -0700 Azure TDX+vTPM composite attestation (#125) * Draft changes for TDX/TPM composite attestation. * Help correction. * Misc code clean up. * Misc cleanup * Add pcr selection, additional refactoring of TPM/adapter. * Owner auth, request-ids, token signing alg. * Updates while debugging against poc/tpm_with_coordinator-main-rebase cc75186c. * Minor changes Add user-data/verifier-nonce handling Miscellaneous fixes from debugging. Add sleep to workaround Azure bug. Adjust the name of user_data/nonce. Wire up misc command line options into request body. Refactor TPM/vTPM and composite attestation. Revive "evidence" command (by popular demand). Correct command line usage (--aztdx vs. --tdx). Fix incorrect error handling in TPM adapter. Enable checkmarx check in CI Bump CLI version. CI updates. Unit test correction. Unit test corrections. Cassini 21810 -- README files for AZ-TDX/vTPM preview (#139) * Initial commit for TPM readmes. * Changes from first review feedback; ready for final review. * Fix typo --------- Co-authored-by: Thompson, Kent <kent.thompson@intel.com> Miscellaneous fixes made during "physical-tpm" validation. (#144) * CASSINI-21986: Remove 3 second sleep from azure adapter. * Misc fixes, unit tests and comment updates. * Correction. * Address pull request comments. CASSINI-21986: Remove 3 second sleep from azure adapter. Correction. Address pull request comments. Address pull request comments. Remove info message when writing to NV ram. Remove info/time from logrus messages when used in trustauthority-cli. Clean up comment. Consistently print '0x' and hex for TPM handles. WIP IMA changes. Better error reporting for ima log failures. Misc changes while debuging end-to-end. WIP Corrections for IMA demo. WIP event-log changes. CASSINI-21894: Event-log filtering. Evidence json correction. Fixes issue with TCG event-log header verification. * Additional unit test coverage. * Correction. * Address PR comment. * Add mock tpm adapter for unit tests. --------- Signed-off-by: Jerry Yu <jerry.yu@intel.com> Co-authored-by: Yanhui Zhao <wildyz.yky@gmail.com> Co-authored-by: Rawat, Arvind <arvind.rawat@intel.com> Co-authored-by: Jerry Yu <jerry.yu@intel.com>
1 parent 023f3d7 commit 6c0e266

File tree

10 files changed

+454
-18
lines changed

10 files changed

+454
-18
lines changed

go-aztdx/go.sum

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,8 +15,8 @@ github.com/goccy/go-json v0.10.2/go.mod h1:6MelG93GURQebXPDq3khkgXZkazVtN9CRI+MG
1515
github.com/godbus/dbus v0.0.0-20190726142602-4481cbc300e2/go.mod h1:bBOAhwG1umN6/6ZUMtDFBMQR8jRg9O75tm9K00oMsK4=
1616
github.com/golang-jwt/jwt/v4 v4.5.0 h1:7cYmW1XlMY7h7ii7UhUyChSgS5wUJEnm9uZVTGqOWzg=
1717
github.com/golang-jwt/jwt/v4 v4.5.0/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
18-
github.com/google/uuid v1.5.0 h1:1p67kYwdtXjb0gL0BPiP1Av9wiZPo5A8z2cWkTZ+eyU=
19-
github.com/google/uuid v1.5.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
18+
github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
19+
github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
2020
github.com/gorilla/mux v1.8.0/go.mod h1:DVbg23sWSpFRCP0SfiEN6jmj59UnW/n46BH5rLB71So=
2121
github.com/hashicorp/go-cleanhttp v0.5.2 h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ=
2222
github.com/hashicorp/go-cleanhttp v0.5.2/go.mod h1:kO/YDlP8L1346E6Sodw+PrpBSV4/SoxCXGY6BqNFT48=

0 commit comments

Comments
 (0)