package
0.11.1
Repository: https://github.com/google/go-sev-guest.git
Documentation: pkg.go.dev

# Functions

CertificateExtensions returns the x509v3 extensions from the KDS specification interpreted into a struct type.
ComposeTCBParts returns an SEV-SNP TCB_VERSION from OID mapping values.
CrlLinkByKey returns the CRL distribution point for the given key type's product.
CrlLinkByRole returns the CRL distribution point for the given key role's product.
DecomposeTCBVersion interprets the byte components of the AMD representation of the platform security patch levels into a struct.
DefaultProductLine returns the product line of the default SEV product.
DefaultProductString returns the product line of the default SEV product.
ParseProduct returns the SevProductName for a product name without the stepping suffix.
ParseProductCertChain returns the DER-formatted certificates represented by the body of the ProductCertChain (cert_chain) endpoint, ASK and ARK in that order.
ParseProductCertChainURL returns the product name and either "vcek" or "vlek" for a KDS cert_chain url, or an error if the input is not a KDS cert_chain url.
ParseProductLine returns the SevProductName for a product name without the stepping suffix.
ParseProductName returns the KDS project input value, and the model, stepping numbers represented by a given V[CL]EK productName extension value, or an error.
ParseVCEKCertURL returns the attestation report components represented in the given KDS VCEK certificate request URL.
ParseVLEKCertURL returns the attestation report components represented in the given KDS VLEK certificate request URL.
ProductCertChainURL returns the AMD KDS URL for retrieving the ARK and AS(V)K certificates on the given product in ??? format.
ProductLine returns the KDS product argument to use for the product associated with an attestation report proto.
ProductLineOfProductName returns the product represented by productNameOrProductLine, i.e., without the stepping suffix.
ProductName returns the expected productName extension value for the product associated with an attestation report proto.
ProductString returns the KDS product argument to use for the product associated with an attestation report proto.
TCBPartsLE returns true iff all TCB components of tcb0 are <= the corresponding tcb1 components.
VcekCertificateExtensions returns the x509v3 extensions from the KDS specification of a VCEK certificate interpreted into a struct type.
VCEKCertProduct returns a VCEKCert with the product line set to productLine.
VCEKCertURL returns the AMD KDS URL for retrieving the VCEK on a given product at a given TCB version.
VlekCertificateExtensions returns the x509v3 extensions from the KDS specification of a VLEK certificate interpreted into a struct type.
VLEKCertURL returns the GET URL for retrieving a VLEK certificate, but without the necessary CSP secret in the HTTP headers that makes the request validate to the KDS.

# Constants

UnknownCertFunction represents an unknown endpoint for parsing KDS URLs.
VcekCertFunction represents the vcek endpoints for parsing KDS URLs.
VlekCertFunction represents the vlek endpoints for parsing KDS URLs.

# Variables

OidBlSpl is the x509v3 extension for V[CL]EK certificate bootloader security patch level.
OidCspID is the x509v3 extension for a VLEK certificate's Cloud Service Provider's origin TLS key's certificate's subject key's CommonName.
OidHwid is the x509v3 extension for VCEK certificate associated hardware identifier.
OidProductName1 is the x509v3 extension for V[CL]EK certificate product name.
OidSnpSpl is the x509v3 extension for V[CL]EK certificate SNP security patch level.
OidSpl4 is the x509v3 extension for V[CL]EK certificate reserved security patch level.
OidSpl5 is the x509v3 extension for V[CL]EK certificate reserved security patch level.
OidSpl6 is the x509v3 extension for V[CL]EK certificate reserved security patch level.
OidSpl7 is the x509v3 extension for V[CL]EK certificate reserved security patch level.
OidStructVersion is the x509v3 extension for V[CL]EK certificate struct version.
OidTeeSpl is the x509v3 extension for V[CL]EK certificate TEE security patch level.
OidUcodeSpl is the x509v3 extension for V[CL]EK microcode security patch level.

# Structs

Extensions represents the information stored in the KDS-specified x509 extensions of a V{C,L}EK certificate.
TCBParts represents all TCB field values in a given uint64 representation of an AMD secure processor firmware TCB version.
VCEKCert represents the attestation report components represented in a KDS VCEK certificate request URL.
VLEKCert represents the attestation report components represented in a KDS VLEK certificate request URL.

# Type aliases

CertFunction is an enumeration of which endorsement key type is getting certified.
TCBVersion is a 64-bit bitfield of different security patch levels of AMD firmware and microcode.