tpm-key_attestation 0.1.0 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 37839aaec1d1cf608d9251208a7aa890ec07eb41fa1823d82dc7f471357c0715
-  data.tar.gz: '058ec854deb4c35056592debcf82d0c647674c4ae26dc1b9ec73f9be87be744e'
+  metadata.gz: 7a70caca43d540853ceca86581030de8e86925e630510deb34e3af736e314b55
+  data.tar.gz: c7b0ab0e81a6607b9d24b8a8a01aa0447f2b4281f961f0180d27dd4f8fc88e00
 SHA512:
-  metadata.gz: 12d051a82ab6c9b2d989376b327223c3d5fed3da23a5d8d1199dbb7137f9770b8e6799078fe7c80230d64469394eaf13288610f8a638eeeea6da1feb916b7cf6
-  data.tar.gz: be6d90f4e699bc03ac08ce393cf77bc4e19df94e88b062a47473d173c3a2ace645ca01daee79135ebb1f05bff9be97c87ed03bfe8fbcf0fa865f173a0f6aa4e9
+  metadata.gz: babb217a8144f5fc34ce1f2b8a02485390b1c744beb3ed7f5f80e656415ad70dd674b2a7917b3e4db778aa7e69b20318179609c15d793126028a0699b38932e2
+  data.tar.gz: 16e3f16f0cbe9d9d3032f112416d276532563c1730959cc8c41539e750e7476f3bc4a7074671628524bb051a7be17c792209ff4d931ac1808f56e390225782eb

data/.gitignore

@@ -9,3 +9,5 @@
 
 # rspec failure tracking
 .rspec_status
+
+/gemfiles/*.gemfile.lock

data/.rubocop.yml

@@ -1,6 +1,8 @@
 AllCops:
   TargetRubyVersion: 2.3
   DisabledByDefault: true
+  Exclude:
+    - "gemfiles/**/*"
 
 Bundler:
   Enabled: true

data/.travis.yml

@@ -1,6 +1,28 @@
 ---
+dist: bionic
 language: ruby
 cache: bundler
+
 rvm:
+  - ruby-head
   - 2.7.0
-before_install: gem install bundler -v 2.1.4
+  - 2.6.5
+  - 2.5.7
+  - 2.4.9
+  - 2.3.8
+
+gemfile:
+  - gemfiles/openssl_head.gemfile
+  - gemfiles/openssl_2_1.gemfile
+  - gemfiles/openssl_2_0.gemfile
+  - gemfiles/openssl_default.gemfile
+
+matrix:
+  fast_finish: true
+  allow_failures:
+    - rvm: ruby-head
+    - gemfile: gemfiles/openssl_head.gemfile
+
+before_install:
+  - gem install bundler -v "~> 2.0"
+  - rm Gemfile.lock

data/Appraisals

@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+appraise "openssl_head" do
+  gem "openssl", git: "https://github.com/ruby/openssl"
+end
+
+appraise "openssl_2_1" do
+  gem "openssl", "~> 2.1.0"
+end
+
+appraise "openssl_2_0" do
+  gem "openssl", "~> 2.0.0"
+end
+
+appraise "openssl_default" do
+end

data/CHANGELOG.md

@@ -0,0 +1,17 @@
+# Changelog
+
+## [v0.2.0] - 2020-01-16
+
+### Added
+
+- `TPM::KeyAttestation#valid?`
+
+## [v0.1.0] - 2020-01-15
+
+### Added
+
+- `TPM::EKCertificate` wrapper
+- `TPM::SAttest` wrapper
+
+[v0.2.0]: https://github.com/cedarcode/tpm-key_attestation/compare/v0.1.0...v0.2.0/
+[v0.1.0]: https://github.com/cedarcode/tpm-key_attestation/compare/57c926ef7e83830cee8d111fdc5ccaf99ab2e861...v0.1.0/

data/Gemfile

@@ -5,6 +5,7 @@ source "https://rubygems.org"
 # Specify your gem's dependencies in tpm-key_attestation.gemspec
 gemspec
 
+gem "appraisal", "~> 2.2.0"
 gem "rake", "~> 12.0"
 gem "rspec", "~> 3.0"
 

data/Gemfile.lock

@@ -1,12 +1,16 @@
 PATH
   remote: .
   specs:
-    tpm-key_attestation (0.1.0)
+    tpm-key_attestation (0.2.0)
       bindata (~> 2.4)
 
 GEM
   remote: https://rubygems.org/
   specs:
+    appraisal (2.2.0)
+      bundler
+      rake
+      thor (>= 0.14.0)
     ast (2.4.0)
     bindata (2.4.4)
     diff-lcs (1.3)
@@ -37,12 +41,14 @@ GEM
       ruby-progressbar (~> 1.7)
       unicode-display_width (>= 1.4.0, < 1.7)
     ruby-progressbar (1.10.1)
+    thor (1.0.1)
     unicode-display_width (1.6.0)
 
 PLATFORMS
   ruby
 
 DEPENDENCIES
+  appraisal (~> 2.2.0)
   rake (~> 12.0)
   rspec (~> 3.0)
   rubocop

data/README.md

@@ -1,8 +1,9 @@
-# TPM::KeyAttestation
+# tpm-key_attestation
 
-Welcome to your new gem! In this directory, you'll find the files you need to be able to package up your Ruby library into a gem. Put your Ruby code in the file `lib/tpm/key_attestation`. To experiment with that code, run `bin/console` for an interactive prompt.
+TPM Key Attestation utitlies
 
-TODO: Delete this and the text above, and describe your gem
+[![Gem](https://img.shields.io/gem/v/tpm-key_attestation.svg?style=flat-square)](https://rubygems.org/gems/tpm-key_attestation)
+[![Travis](https://img.shields.io/travis/cedarcode/tpm-key_attestation.svg?style=flat-square)](https://travis-ci.org/cedarcode/tpm-key_attestation)
 
 ## Installation
 

data/Rakefile

@@ -2,7 +2,9 @@
 
 require "bundler/gem_tasks"
 require "rspec/core/rake_task"
+require "rubocop/rake_task"
 
 RSpec::Core::RakeTask.new(:spec)
+RuboCop::RakeTask.new
 
-task default: :spec
+task default: [:rubocop, :spec]

data/SECURITY.md

@@ -0,0 +1,8 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you have discovered a security bug, please send an email to security@cedarcode.com
+instead of posting to the GitHub issue tracker.
+
+Thank you!

data/gemfiles/openssl_2_0.gemfile

@@ -0,0 +1,11 @@
+# This file was generated by Appraisal
+
+source "https://rubygems.org"
+
+gem "appraisal", "~> 2.2.0"
+gem "rake", "~> 12.0"
+gem "rspec", "~> 3.0"
+gem "rubocop"
+gem "openssl", "~> 2.0.0"
+
+gemspec path: "../"

data/gemfiles/openssl_2_1.gemfile

@@ -0,0 +1,11 @@
+# This file was generated by Appraisal
+
+source "https://rubygems.org"
+
+gem "appraisal", "~> 2.2.0"
+gem "rake", "~> 12.0"
+gem "rspec", "~> 3.0"
+gem "rubocop"
+gem "openssl", "~> 2.1.0"
+
+gemspec path: "../"

data/gemfiles/openssl_default.gemfile

@@ -0,0 +1,10 @@
+# This file was generated by Appraisal
+
+source "https://rubygems.org"
+
+gem "appraisal", "~> 2.2.0"
+gem "rake", "~> 12.0"
+gem "rspec", "~> 3.0"
+gem "rubocop"
+
+gemspec path: "../"

data/gemfiles/openssl_head.gemfile

@@ -0,0 +1,11 @@
+# This file was generated by Appraisal
+
+source "https://rubygems.org"
+
+gem "appraisal", "~> 2.2.0"
+gem "rake", "~> 12.0"
+gem "rspec", "~> 3.0"
+gem "rubocop"
+gem "openssl", git: "https://github.com/ruby/openssl"
+
+gemspec path: "../"

data/lib/tpm/key_attestation.rb

@@ -3,7 +3,37 @@
 require "tpm/key_attestation/version"
 
 module TPM
-  module KeyAttestation
+  class KeyAttestation
     class Error < StandardError; end
+
+    attr_reader :certify_info, :signature, :certified_object, :signing_key, :hash_function, :qualifying_data
+
+    def initialize(certify_info, signature, certified_object, signing_key, hash_function, qualifying_data)
+      @certify_info = certify_info
+      @signature = signature
+
+      @certified_object = certified_object
+      @signing_key = signing_key
+      @hash_function = hash_function
+      @qualifying_data = qualifying_data
+    end
+
+    def valid?
+      valid_signature? && valid_certify_info?
+    end
+
+    private
+
+    def valid_signature?
+      signing_key.verify(hash_function, signature, certify_info)
+    end
+
+    def valid_certify_info?
+      s_attest.valid?(certified_object, qualifying_data)
+    end
+
+    def s_attest
+      @s_attest ||= ::TPM::SAttest.read(certify_info)
+    end
   end
 end

data/lib/tpm/key_attestation/version.rb

@@ -1,7 +1,7 @@
 # frozen_string_literal: true
 
 module TPM
-  module KeyAttestation
-    VERSION = "0.1.0"
+  class KeyAttestation
+    VERSION = "0.2.0"
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: tpm-key_attestation
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - Gonzalo
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2020-01-15 00:00:00.000000000 Z
+date: 2020-01-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bindata
@@ -34,13 +34,20 @@ files:
 - ".rspec"
 - ".rubocop.yml"
 - ".travis.yml"
+- Appraisals
+- CHANGELOG.md
 - Gemfile
 - Gemfile.lock
 - LICENSE
 - README.md
 - Rakefile
+- SECURITY.md
 - bin/console
 - bin/setup
+- gemfiles/openssl_2_0.gemfile
+- gemfiles/openssl_2_1.gemfile
+- gemfiles/openssl_default.gemfile
+- gemfiles/openssl_head.gemfile
 - lib/tpm/constants.rb
 - lib/tpm/ek_certificate.rb
 - lib/tpm/key_attestation.rb