Re: [PATCH v4 2/6] configfs-tsm: Introduce a shared ABI for attestation reports

From: Peter Gonda
Date: Wed Sep 27 2023 - 10:38:35 EST


On Wed, Sep 27, 2023 at 2:25 AM Thomas Fossati
<thomas.fossati@xxxxxxxxxx> wrote:
>
> On Wed, 27 Sept 2023 at 10:21, Dan Williams <dan.j.williams@xxxxxxxxx> wrote:
> > It can be expanded when/if those platforms expand the
> > size of the supported user data, or another configfs-tsm backend arrives
> > that needs that capability.
>
> Makes sense, thanks.

I'm not familiar with the rats eat spec but I would assume the
protocol would acquire more than just the nonce in the inblob.
Probably some combination of claims, nonce, and information about a
public key? Does the specification allow for the data needing to be
signed by the TSM to be hashed first?