zeekay aa7a640e9d attestation: SGX/TDX/SEV-SNP quote byte-layout parsers — vendor formats finished ...

Real parsers for the three production TEE quote formats, decoding the documented binary layouts and
verifying the full vendor trust chain (no longer the canonical-model stand-in):
- SGX (DCAP v3): header+report body offsets (MRENCLAVE@112, report_data@368); PCK chain→pinned Intel
  root, PCK signs the QE report, the QE report binds the attestation key (sha256(attestPub‖authData)),
  the attestation key signs the quote — full DCAP flow.
- TDX (DCAP v4): version 4 / tee_type 0x81, MRTD@184, report_data@568; same sigData chain.
- SEV-SNP: 1184-byte report, measurement@0x90, report_data@0x50, P-384 VCEK signature@0x2A0 (LE
  scalars), VCEK→pinned AMD root.
All verify the operator-key binding in report_data. 9/9 incl. tampered-measurement (sig fails),
unpinned-root (chain fails), unbound-key for each format.

2026-06-24 09:40:07 -07:00

..

attestation_test.go

attestation: SGX/TDX/SEV-SNP quote byte-layout parsers — vendor formats finished

2026-06-24 09:40:07 -07:00

attestation.go

crypto: PQ confidentiality (X-Wing), TEE attestation verifier, node-scaling benchmark

2026-06-24 09:12:18 -07:00

vendor_test.go

attestation: SGX/TDX/SEV-SNP quote byte-layout parsers — vendor formats finished

2026-06-24 09:40:07 -07:00

vendor.go

attestation: SGX/TDX/SEV-SNP quote byte-layout parsers — vendor formats finished

2026-06-24 09:40:07 -07:00