Expand description
Include modules that define the data structures of VMGS entries.
Structs§
- DekKp
- DEK key protector entry.
- GspKp
- GSP key protector entry.
- Guest
Secret Key - The data format of the
FileId::GUEST_SECRET_KEY
entry in the VMGS file. - Hardware
KeyProtector - The data format of the
FileId::HW_KEY_PROTECTOR
entry in the VMGS file. - Hardware
KeyProtector Header - The header of
HardwareKeyProtector
. - KeyProtector
- The data format of the
FileId::KEY_PROTECTOR
entry in the VMGS file. - KeyProtector
ById - The data format of the host/fabric-provided key protector.
- Security
Profile - The data format of the
FileId::ATTEST
entry in the VMGS file.
Constants§
- AES_
CBC_ IV_ LENGTH - AES-CVC IV size
- AES_
CBC_ KEY_ LENGTH - AES-CBC key size
- AES_
GCM_ KEY_ LENGTH - AES-GCM key size
- AGENT_
DATA_ MAX_ SIZE - Maximum size of the
agent_data
. - DEK_
BUFFER_ SIZE - DEK buffer size
- GSP_
BUFFER_ SIZE - GSP buffer size
- GUEST_
SECRET_ KEY_ MAX_ SIZE - Maximum size of the
guest_secret_key
. - HMAC_
SHA_ 256_ KEY_ LENGTH - HACK-SHA-256 key size
- HW_
KEY_ PROTECTOR_ SIZE - The size of the
FileId::HW_KEY_PROTECTOR
entry in the VMGS file. - HW_
KEY_ VERSION - The header, IV, and last 256 bits of HMAC are fixed for this version. The ciphertext is allowed to grow, though secrets should stay in the same position to allow downlevel versions to continue to understand that portion of the data.
- KEY_
PROTECTOR_ SIZE - Size of the
FileId::KEY_PROTECTOR
VMGS file entry. - NUMBER_
KP - Number of the key protector entries. One for ingress, and one for egress