mirror of
https://github.com/luxfi/cc.git
synced 2026-09-24 00:24:54 +00:00
zeekay
adf365df9a
Extract the canonical vendor-neutral attestation verifier out of luxfi/mpc into its own orthogonal leaf module github.com/luxfi/cc so the MPC custody system, the TEE custody extension, and the confidential-AI / proof-of-AI system can all depend on ONE verifier and the verifier depends on none of their domains. - attest: Verifier interface, VerifiedReport, Option, Dispatch. KindSEVSNP (PROD, go-sev-guest + AMD KDS), KindTDX (fail-loud stub), KindNVTrust (NEW, PROD local-RIM mode). - attest/nvidia: GPU evidence parser, signed-RIM verifier + measurement matcher, NRAS remote JWS client (moved verbatim from mpc/pkg/attestation/ nvidia — clean stdlib-only leaf). - KindNVTrust replaces the former KindNRAS stub with a real, cloud-free verify: parse GPU evidence, verify the NVIDIA-signed RIM against an operator-pinned key, match every measurement to the signed golden value. No insecure mode; empty RIM/roots is refused. Leaf builds + tests green standalone (GOWORK=off).
luxfi/cc — Confidential Compute attestation
github.com/luxfi/cc is the single, vendor-neutral attestation verifier
for the Lux confidential-compute control plane. It is an orthogonal leaf:
the MPC custody system (luxfi/mpc), the TEE custody extension (luxfi/tee),
and the confidential-AI / proof-of-AI system (luxfi/ai) all depend on it,
and it depends on none of them. There is exactly one attestation verifier;
hardware platforms are orthogonal Kinds behind one Verify interface.
Packages
| Import | Purpose |
|---|---|
github.com/luxfi/cc/attest |
The Verifier interface, VerifiedReport, Option, and Dispatch(kind, evidence, opts...). One entry point per hardware Kind. |
github.com/luxfi/cc/attest/nvidia |
NVIDIA GPU primitives: GPU evidence parser, signed-RIM verifier + measurement matcher, and the NRAS remote-attestation JWS client. Backend for KindNVTrust. |
Kinds (orthogonal hardware platforms)
KindSEVSNP— AMD SEV-SNP CPU. PRODUCTION. Live VCEK fetch from the AMD KDS, full ARK→ASK→VCEK chain + report-signature verification (google/go-sev-guest).KindTDX— Intel TDX CPU. Stub (ErrNotImplemented, fail-loud). Tracked forgo-tdx-guest+ Intel PCS.KindNVTrust— NVIDIA GPU confidential compute. PRODUCTION local-RIM mode (cloud-free): verifies the NVIDIA-signed Reference Integrity Manifest against an operator-pinned key, then matches every reported GPU measurement to the signed golden value. No NVIDIA cloud dependency. The remote NVIDIA Remote Attestation Service (NRAS) JWS path is the lower-levelnvidia.NRASClientprimitive for deployments that accept a cloud anchor.
Invariants
- No insecure mode. A verify with no trust anchor is refused, never
best-effort.
KindNVTrustrefuses an empty RIM or empty trust-root set. - One
VerifiedReporttype shared across all consumers — required so thekms.CompositeAttestationrelease-gate interface has a single, unambiguous signature acrossluxfi/mpc,luxfi/tee, andluxfi/ai. (nil, err)means refuse. No partial reports on error.- Tests never hit the network. AMD KDS responses are replayed from
attest/testdata; NVIDIA RIM fixtures are signed in-test.
Build
export SDKROOT="$(xcrun --show-sdk-path)" # macOS
GOWORK=off go build ./...
GOWORK=off go test ./...