mirror of
https://github.com/luxfi/cc.git
synced 2026-09-24 00:24:54 +00:00
ARM CCA Realm attestation: a CBOR/COSE CCA token collection (platform token signed by the operator-pinned CPAK/IAK + realm token signed by the RAK, with the H(RAK) platform-realm binding enforced). Vendor arm.cca, fail-closed zero value, real COSE_Sign1 verification. armcca branched before the registry landed and carried its own parallel copy (extraVerifiers map + a duplicate registerVerifier + a second VerifierFor lookup). Converged to the one registry: deleted that block so armcca.go's init() registers through the canonical registerVerifier in verifier.go, and repointed its self-registration test to RegisteredVerifier. There is one registry, one lookup, one dispatch path — no second way. go.mod: unioned the require blocks (cbor/v2, go-sev-guest, go-tdx-guest, veraison/ccatoken, go-cose); go mod tidy clean; ccatoken is v1.4.0 and its transitive jwx/v2, secp256k1/v4 carry their major in the import path — no dep bumped to a new major. doc.go + verifier.go: ARM CCA is now a real 6th Kind, not pending. verifier_test.go: TestRegistry_RoutesEveryKind covers all six. go build/vet/test + go test -race ./attest/... green; gofmt clean.
36 lines
1.3 KiB
AMPL
36 lines
1.3 KiB
AMPL
module github.com/luxfi/cc
|
|
|
|
go 1.26.4
|
|
|
|
require (
|
|
github.com/fxamacker/cbor/v2 v2.9.2
|
|
github.com/google/go-sev-guest v0.14.1
|
|
github.com/google/go-tdx-guest v0.3.1
|
|
github.com/veraison/ccatoken v1.4.0
|
|
github.com/veraison/go-cose v1.3.0
|
|
)
|
|
|
|
require (
|
|
github.com/davecgh/go-spew v1.1.1 // indirect
|
|
github.com/decred/dcrd/dcrec/secp256k1/v4 v4.1.0 // indirect
|
|
github.com/goccy/go-json v0.9.11 // indirect
|
|
github.com/google/logger v1.1.1 // indirect
|
|
github.com/google/uuid v1.6.0 // indirect
|
|
github.com/lestrrat-go/blackmagic v1.0.1 // indirect
|
|
github.com/lestrrat-go/httpcc v1.0.1 // indirect
|
|
github.com/lestrrat-go/httprc v1.0.4 // indirect
|
|
github.com/lestrrat-go/iter v1.0.2 // indirect
|
|
github.com/lestrrat-go/jwx/v2 v2.0.8 // indirect
|
|
github.com/lestrrat-go/option v1.0.0 // indirect
|
|
github.com/pmezard/go-difflib v1.0.0 // indirect
|
|
github.com/stretchr/testify v1.8.1 // indirect
|
|
github.com/veraison/eat v0.0.0-20220117140849-ddaf59d69f53 // indirect
|
|
github.com/veraison/psatoken v1.2.1-0.20240723091511-b9c092a19d7b // indirect
|
|
github.com/x448/float16 v0.8.4 // indirect
|
|
go.uber.org/multierr v1.11.0 // indirect
|
|
golang.org/x/crypto v0.31.0 // indirect
|
|
golang.org/x/sys v0.28.0 // indirect
|
|
google.golang.org/protobuf v1.36.1 // indirect
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
|
)
|