Skip to content

feat(tee): TDX quote parsing, versions 4 and 5 #1186

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
odesenfans merged 10 commits into from
Sep 4, 2026
Merged

feat(tee): TDX quote parsing, versions 4 and 5 #1186

Show file tree
Hide file tree
Changes from 5 commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
45053d6
feat(tee): TDX quote parsing, versions 4 and 5
odesenfans Sep 2, 2026
e13610a
fix(tee): actually commit the TDX quote fixtures
odesenfans Sep 3, 2026
ded9b81
test(tee): verify the quote signature over signed_region
odesenfans Sep 3, 2026
f649c6a
test(tee): v5 truncation sweep; neutral truncation wording
odesenfans Sep 3, 2026
8b5c907
chore(nix): re-seed golden measurements for the aleph-tee tdx module
odesenfans Sep 3, 2026
35fe672
chore(tee): MIT-only TDX fixtures, licence texts, pinned provenance
odesenfans Sep 3, 2026
6537ef4
test(tee): derive the padding boundary; cover v5 with a TD report 1.0…
odesenfans Sep 3, 2026
d77bcea
refactor(tee): QE report as a fixed-size array
odesenfans Sep 3, 2026
6291c12
test(tee): spell test offsets with the module constants; fix a comment
odesenfans Sep 3, 2026
08ca7e7
chore(nix): re-seed golden measurements for the QE report type change
odesenfans Sep 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions .gitignore
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,8 @@ __pycache__
# scripts/generate_rust_fixtures.py from the SQLAlchemy models).
!rust/crates/supervisor-daemon/tests/fixtures/*.sqlite3
*.bin
# Vendored TDX quote fixtures (see the README next to them for provenance).
!rust/crates/aleph-tee/tests/fixtures/tdx/*.bin
*.ext4
*.zip
*.pyz
Expand Down
8 changes: 4 additions & 4 deletions nix/golden-measurements.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"measurement": "d206d416ce8a468cdcef2baa0e221168e96f582b74f0e59e1f214247d4d5146ce57aee01adb0b4152768ceb61a5ae667",
"composeMeasurement": "700e4cf55c9963ac49d3e23d71a95dfc092ad06107fdf89e919ba24066d8e5ec7faed185723a2e3c6aea2967385a5789",
"workloadMeasurement": "09fd1418cc3c4969f1081334004a13d3d5356563397019a6214387fe7b1d2099d03103da35b7785b4b8285d350a2fbd0",
"instanceMeasurementSmoke": "07cf6180a5ab297ab06ee4312d05729777acac7da2548667d9f8797d11645df478a5be5678cc2f44236bf431c908787c"
"measurement": "56b5537291eb409960625573bc3230767ae6175fd1d8474510e2d89397aa66dfd58b5c7186cf5d11c507ae74c3df3b37",
"composeMeasurement": "88e59e0fd6fdbef9dcda5dc98eceda7cf95574c45ca932b014db2b8c9d8641f268eb2101ae68798aab9a1c60c41e4a63",
"workloadMeasurement": "653ebbb353a1efb266207360d5d5174c287c7a9a79b1eb0c124d984167edb2238a0127a0185b7d0572797b5c78e063ab",
"instanceMeasurementSmoke": "d720f025d13a4d4cc0fddd86c6a27b9133354f65ede42d0629e6271a14248ecc0fa4ad9bee88d5c6f5f8fddda09c9fd9"
}
1 change: 1 addition & 0 deletions rust/crates/aleph-tee/src/lib.rs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@ pub mod none;
pub mod owner_auth;
pub mod report_data;
pub mod sev_snp;
pub mod tdx;
pub mod traits;
pub mod types;
pub mod x509;
7 changes: 7 additions & 0 deletions rust/crates/aleph-tee/src/tdx/mod.rs
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
//! Intel TDX attestation stack.
//!
//! Sibling of `sev_snp`: same crate-level conventions, different TEE. Only
//! quote parsing is implemented so far; chain verification, collateral
//! handling and the hardware-backed backend arrive in later increments.

pub mod quote;
Loading
Loading