Skip to main content

id_block_signing_payload

igvmfilegen::snp_id_block

Function id_block_signing_payload 

Source 
pub fn id_block_signing_payload(
    ld: &[u8],
    guest_svn: u32,
    policy: u64,
) -> Result<Vec<u8>>
Expand description

Build the SNP ID block signing payload for an IGVM file.

Called by manifest to emit <base>-snp.idblock. The returned bytes are the raw [SnpPspIdBlock] – exactly the content the SNP firmware hashes (SHA-384) and validates. A file-content signer signs these bytes directly (SHA-384 + ECDSA P-384, DER-encoded signature), so the emitted signature is valid for the firmware without any repackaging. ld is the SNP launch measurement, policy comes from the file’s GuestPolicy, and guest_svn from the manifest.