Expand description
Support for creating SNP ID blocks
Enumsยง
Constantsยง
- SNP_
ECC_ ๐COMPONENT_ SIZE_ BYTES - SNP_
ECC_ ๐KEY_ SIZE_ BYTES - SNP_
ECDSA_ ๐CURVE_ P384 - SNP_
ID_ ๐KEY_ ALGORITHM_ ECDSA_ P384_ SHA384
Functionsยง
- generate_
snp_ measurement - Iterate through all headers, creating a launch digest which is then signed,
returning the launch digest. Also emits a temporarily-signed
[
IgvmDirectiveHeader::SnpIdBlock] directive (the presence of this directive signals the IGVM loader to setid_block_en = 1at launch time). - padded_
le_ ๐component - Zero-pads and reverses a big-endian ECC component into a 72-byte little-endian array as required by the PSP ID block format.
- sign_
id_ ๐block_ with_ temp_ key - Generate a temporary ECDSA P-384 key pair using the selected
cryptobackend, sign the SHA-384 hash of the ID block, and return the signature