@appliedblockchain/silentdatarollup-core 1.0.9 → 1.0.10

package/dist/index.mjs

@@ -32,8 +32,9 @@ import {
   getAuthEIP721Types,
   getAuthHeaders,
   isSignableContractCall,
-  prepareTypedDataPayload
-} from "./chunk-53A5RGL2.mjs";
+  prepareTypedDataPayload,
+  validateTdxAttestation
+} from "./chunk-RWLHE5DT.mjs";
 export {
   ChainId,
   DEBUG_NAMESPACE,
@@ -68,5 +69,6 @@ export {
   getAuthEIP721Types,
   getAuthHeaders,
   isSignableContractCall,
-  prepareTypedDataPayload
+  prepareTypedDataPayload,
+  validateTdxAttestation
 };

package/dist/tests.js

@@ -65,6 +65,187 @@ var log2 = (0, import_debug2.default)(DEBUG_NAMESPACE);
 // src/contract.ts
 var import_ethers5 = require("ethers");
 
+// src/audit/challenge.ts
+var import_ethers7 = require("ethers");
+
+// src/audit/quote/validateTdxQuote.ts
+var x5095 = __toESM(require("@peculiar/x509"));
+
+// src/audit/quote/quoteStructs.ts
+var ErrQuoteV4AuthDataNil = new Error("QuoteV4 authData is nil");
+var ErrQuoteV4Nil = new Error("QuoteV4 is nil");
+var ErrHeaderNil = new Error("header is nil");
+var ErrAttestationKeyType = new Error(
+  "attestation key type not supported"
+);
+var ErrTeeType = new Error("TEE type is not TDX");
+var ErrTDQuoteBodyNil = new Error("TD quote body is nil");
+var ErrQeReportNil = new Error("QE Report is nil");
+
+// src/audit/quote/base64-utils.ts
+var asn1js = __toESM(require("asn1js"));
+var x509 = __toESM(require("@peculiar/x509"));
+
+// src/audit/quote/validate.ts
+var tdxAttributesSeptVeDisSupport = 1n << 28n;
+var tdxAttributesPksSupport = 1n << 30n;
+var tdxAttributesPerfmonSupport = 1n << 63n;
+var tdAttributesFixed0 = 0x1n | tdxAttributesSeptVeDisSupport | tdxAttributesPksSupport | tdxAttributesPerfmonSupport;
+
+// src/audit/quote/verify.ts
+var x5094 = __toESM(require("@peculiar/x509"));
+
+// src/audit/quote/pck.ts
+var asn1js3 = __toESM(require("asn1js"));
+
+// src/audit/quote/tcb.ts
+var asn1js2 = __toESM(require("asn1js"));
+var x5092 = __toESM(require("@peculiar/x509"));
+var ErrRootCertNil = new Error("root certificate is empty");
+var ErrCollateralNil = new Error(
+  "collateral received is an empty structure"
+);
+var ErrTcbInfoTcbLevelsMissing = new Error(
+  "tcbInfo contains empty TcbLevels"
+);
+var ErrQeIdentityTcbLevelsMissing = new Error(
+  "QeIdentity contains empty TcbLevels"
+);
+var ErrCrlEmpty = new Error("CRL is empty");
+var ErrTrustedCertEmpty = new Error("trusted certificate is empty");
+var ErrTcbStatus = new Error(
+  "unable to find latest status of TCB, it is now OutOfDate"
+);
+
+// src/audit/quote/pck.ts
+var ErrPckCertChainNil = new Error("PCK certificate chain is nil");
+var ErrPCKCertChainInvalid = new Error(
+  "incomplete PCK Certificate chain found, should contain 3 concatenated PEM-formatted 'CERTIFICATE'-type block (PCK Leaf Cert||Intermediate CA Cert||Root CA Cert)"
+);
+var ErrRootCaCertExpired = new Error(
+  "root CA certificate in PCK certificate chain has expired"
+);
+var ErrIntermediateCertNil = new Error(
+  "intermediate certificate is empty"
+);
+var ErrPCKCertNil = new Error("PCK certificate is empty");
+var ErrRevocationCheckFailed = new Error(
+  "unable to check for certificate revocation as GetCollateral parameter in the options is set to false"
+);
+var ErrIntermediateCaCertExpired = new Error(
+  "intermediate CA certificate in PCK certificate chain has expired"
+);
+var ErrPckLeafCertExpired = new Error(
+  "PCK leaf certificate in PCK certificate chain has expired"
+);
+var ErrPckCertCANil = new Error(
+  "could not find CA from PCK certificate"
+);
+
+// src/audit/quote/collateral.ts
+var x5093 = __toESM(require("@peculiar/x509"));
+var asn1js4 = __toESM(require("asn1js"));
+var ErrMissingTcbInfoBody = new Error(
+  "missing tcbInfo body in the collaterals obtained"
+);
+var ErrMissingEnclaveIdentityBody = new Error(
+  "missing enclaveIdentity body in the collaterals obtained"
+);
+var ErrTcbInfoNil = new Error("tcbInfo is empty in collaterals");
+var ErrQeIdentityNil = new Error("QeIdentity is empty in collaterals");
+var ErrMissingTcbInfoSigningCert = new Error(
+  "missing signing certificate in the issuer chain of tcbInfo"
+);
+var ErrMissingTcbInfoRootCert = new Error(
+  "missing root certificate in the issuer chain of tcbInfo"
+);
+var ErrMissingQeIdentitySigningCert = new Error(
+  "missing signing certificate in the issuer chain of QeIdentity"
+);
+var ErrMissingQeIdentityRootCert = new Error(
+  "missing root certificate in the issuer chain of QeIdentity"
+);
+var ErrMissingPckCrl = new Error(
+  "missing PCK CRL in the collaterals obtained"
+);
+var ErrMissingRootCaCrl = new Error(
+  "missing ROOT CA CRL in the collaterals obtained"
+);
+var ErrMissingPCKCrlSigningCert = new Error(
+  "missing signing certificate in the issuer chain of PCK CRL"
+);
+var ErrMissingPCKCrlRootCert = new Error(
+  "missing root certificate in the issuer chain of PCK CRL"
+);
+var ErrTcbInfoExpired = new Error("tcbInfo has expired");
+var ErrQeIdentityExpired = new Error("QeIdentity has expired");
+var ErrTcbInfoSigningCertExpired = new Error(
+  "tcbInfo signing certificate has expired"
+);
+var ErrTcbInfoRootCertExpired = new Error(
+  "tcbInfo root certificate has expired"
+);
+var ErrQeIdentityRootCertExpired = new Error(
+  "QeIdentity root certificate has expired"
+);
+var ErrQeIdentitySigningCertExpired = new Error(
+  "QeIdentity signing certificate has expired"
+);
+var ErrRootCaCrlExpired = new Error("root CA CRL has expired");
+var ErrPCKCrlExpired = new Error("PCK CRL has expired");
+var ErrPCKCrlSigningCertExpired = new Error(
+  "PCK CRL signing certificate has expired"
+);
+var ErrPCKCrlRootCertExpired = new Error(
+  "PCK CRL root certificate has expired"
+);
+var ErrEmptyRootCRLUrl = new Error(
+  "empty url found in QeIdentity issuer's chain which is required to receive ROOT CA CRL"
+);
+
+// src/audit/quote/verify.ts
+var ErrOptionsNil = new Error("options parameter is empty");
+var ErrRootCaCertExpired2 = new Error(
+  "root CA certificate in PCK certificate chain has expired"
+);
+var ErrHashVerificationFail = new Error(
+  "unable to verify message digest using quote's signature and ecdsa attestation key"
+);
+var ErrSHA256VerificationFail = new Error(
+  "QE Report Data does not match with value of SHA 256 calculated over the concatenation of ECDSA Attestation Key and QE Authenticated Data"
+);
+
+// src/audit/quote/validateTdxQuote.ts
+var ErrCertificationDataNil = new Error("certification data is nil");
+var ErrQeReportCertificationDataNil = new Error(
+  "QE Report certification data is nil"
+);
+var ErrQeAuthDataNil = new Error("QE AuthData is nil");
+var ErrCertNil = new Error("certificate is nil");
+var ErrParentCertNil = new Error("parent certificate is nil");
+var ErrCertPubKeyType = new Error(
+  "certificate public key is not of type ecdsa public key"
+);
+var ErrRootCaCertExpired3 = new Error(
+  "root CA certificate in PCK certificate chain has expired"
+);
+var ErrPublicKeySize = new Error("public key is of unexpected size");
+var ErrPckExtInvalid = new Error(
+  "unexpected leftover bytes for PCK certificate's extension"
+);
+var ErrSgxExtInvalid = new Error(
+  "unexpected leftover bytes when parsing SGX extensions"
+);
+var ErrTcbExtInvalid = new Error(
+  "unexpected leftover bytes for TCB extension inside SGX extension field"
+);
+var ErrTcbCompInvalid = new Error(
+  "unexpected leftover bytes for TCB components in TCB Extension inside SGX extension field"
+);
+
+// src/audit/registry.ts
+var import_ethers6 = require("ethers");
+
 // tests/utils/mocked-custom-grpc.ts
 var import_http = __toESM(require("http"));
 var currentPort = 3e3;

package/dist/tests.mjs

@@ -1,4 +1,4 @@
-import "./chunk-53A5RGL2.mjs";
+import "./chunk-RWLHE5DT.mjs";
 
 // tests/utils/mocked-custom-grpc.ts
 import http from "http";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@appliedblockchain/silentdatarollup-core",
-  "version": "1.0.9",
+  "version": "1.0.10",
   "description": "Core library for Silent Data",
   "author": "Applied Blockchain",
   "homepage": "https://github.com/appliedblockchain/silent-data-rollup-providers#readme",
@@ -29,6 +29,8 @@
     "dist"
   ],
   "dependencies": {
+    "@peculiar/x509": "1.14.2",
+    "asn1js": "3.0.7",
     "debug": "4.3.7",
     "ethers": "6.13.2"
   },