@super-protocol/addons-tee 1.1.2 → 1.1.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@super-protocol/addons-tee",
-  "version": "1.1.2",
+  "version": "1.1.3",
   "description": "The TEE trusted loader addons",
   "tags": [
     "tee"

package/bindings/go-tdx-attest-wrapper/.gitignore

@@ -1,8 +0,0 @@
-.gocache/
-.gomodcache/
-/go-tdx-attest-wrapper
-/tdx-attest-wrapper
-!go.mod
-!go.sum
-!main.go
-!.gitignore

package/bindings/go-tdx-attest-wrapper/go.mod

@@ -1,18 +0,0 @@
-module github.com/super-protocol/sp-nodejs-addons/tee-addon/bindings/go-tdx-attest-wrapper
-
-go 1.22
-
-require (
-	github.com/google/go-eventlog v0.0.2
-	github.com/google/go-tdx-guest v0.3.1
-)
-
-require (
-	github.com/google/go-configfs-tsm v0.2.2 // indirect
-	github.com/google/go-tpm v0.9.0 // indirect
-	github.com/google/logger v1.1.1 // indirect
-	go.uber.org/multierr v1.11.0 // indirect
-	golang.org/x/crypto v0.17.0 // indirect
-	golang.org/x/sys v0.19.0 // indirect
-	google.golang.org/protobuf v1.34.2 // indirect
-)

package/bindings/go-tdx-attest-wrapper/go.sum

@@ -1,29 +0,0 @@
-github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
-github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
-github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
-github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
-github.com/google/go-configfs-tsm v0.2.2 h1:YnJ9rXIOj5BYD7/0DNnzs8AOp7UcvjfTvt215EWcs98=
-github.com/google/go-configfs-tsm v0.2.2/go.mod h1:EL1GTDFMb5PZQWDviGfZV9n87WeGTR/JUg13RfwkgRo=
-github.com/google/go-eventlog v0.0.2 h1:Q3XESKw1xuO7+U37PmFGmteQqprL8U5/linAiuy3oIY=
-github.com/google/go-eventlog v0.0.2/go.mod h1:7huE5P8w2NTObSwSJjboHmB7ioBNblkijdzoVa2skfQ=
-github.com/google/go-tdx-guest v0.3.1 h1:gl0KvjdsD4RrJzyLefDOvFOUH3NAJri/3qvaL5m83Iw=
-github.com/google/go-tdx-guest v0.3.1/go.mod h1:/rc3d7rnPykOPuY8U9saMyEps0PZDThLk/RygXm04nE=
-github.com/google/go-tpm v0.9.0 h1:sQF6YqWMi+SCXpsmS3fd21oPy/vSddwZry4JnmltHVk=
-github.com/google/go-tpm v0.9.0/go.mod h1:FkNVkc6C+IsvDI9Jw1OveJmxGZUUaKxtrpOS47QWKfU=
-github.com/google/logger v1.1.1 h1:+6Z2geNxc9G+4D4oDO9njjjn2d0wN5d7uOo0vOIW1NQ=
-github.com/google/logger v1.1.1/go.mod h1:BkeJZ+1FhQ+/d087r4dzojEg1u2ZX+ZqG1jTUrLM+zQ=
-github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
-github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
-github.com/stretchr/testify v1.7.0 h1:nwc3DEeHmmLAfoZucVR881uASk0Mfjw8xYJ99tb5CcY=
-github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
-go.uber.org/multierr v1.11.0 h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=
-go.uber.org/multierr v1.11.0/go.mod h1:20+QtiLqy0Nd6FdQB9TLXag12DsQkrbs3htMFfDN80Y=
-golang.org/x/crypto v0.17.0 h1:r8bRNjWL3GshPW3gkd+RpvzWrZAwPS49OmTGZ/uhM4k=
-golang.org/x/crypto v0.17.0/go.mod h1:gCAAfMLgwOJRpTjQ2zCCt2OcSfYMTeZVSRtQlPC7Nq4=
-golang.org/x/sys v0.0.0-20210426230700-d19ff857e887/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.19.0 h1:q5f1RH2jigJ1MoAWp2KTp3gm5zAGFUTarQZ5U386+4o=
-golang.org/x/sys v0.19.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-google.golang.org/protobuf v1.34.2 h1:6xV6lTsCfpGD21XK49h7MhtcApnLqkfYgPcdHftf6hg=
-google.golang.org/protobuf v1.34.2/go.mod h1:qYOHts0dSfpeUzUFpOMr/WGzszTmLH+DiWniOlNbLDw=
-gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
-gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=

package/bindings/go-tdx-attest-wrapper/main.go

@@ -1,246 +0,0 @@
-package main
-
-import (
-	"encoding/base64"
-	"encoding/hex"
-	"encoding/json"
-	"errors"
-	"flag"
-	"fmt"
-	"io"
-	"os"
-	"strings"
-
-	"github.com/google/go-tdx-guest/abi"
-	"github.com/google/go-eventlog/register"
-	"github.com/google/go-eventlog/tcg"
-	"github.com/google/go-tdx-guest/client"
-	pb "github.com/google/go-tdx-guest/proto/tdx"
-)
-
-const (
-	defaultCCELEventLogPath = "/sys/firmware/acpi/tables/data/CCEL"
-	rtmr0MRIndex            = 1
-)
-
-type eventRecord struct {
-	Type   string `json:"type"`
-	Digest string `json:"digest"`
-}
-
-type outputPayload struct {
-	Quote    string        `json:"quote"`
-	EventLog []eventRecord `json:"eventLog"`
-}
-
-type parsedQuotePayload struct {
-	ReportData   string `json:"reportData"`
-	TDAttributes string `json:"tdattributes"`
-	MRTD         string `json:"mrtd"`
-	RTMR0        string `json:"rtmr0"`
-	RTMR1        string `json:"rtmr1"`
-	RTMR2        string `json:"rtmr2"`
-	RTMR3        string `json:"rtmr3"`
-}
-
-func main() {
-	if err := run(); err != nil {
-		fmt.Fprintf(os.Stderr, "error: %v\n", err)
-		os.Exit(1)
-	}
-}
-
-func run() error {
-	if len(os.Args) < 2 {
-		return usageError("missing subcommand: expected 'attest' or 'parse-quote'")
-	}
-
-	switch os.Args[1] {
-	case "attest":
-		return runAttest(os.Args[2:])
-	case "parse-quote":
-		return runParseQuote(os.Args[2:])
-	default:
-		return usageError(fmt.Sprintf("unknown subcommand %q: expected 'attest' or 'parse-quote'", os.Args[1]))
-	}
-}
-
-func runAttest(args []string) error {
-	fs := newFlagSet("attest")
-	reportDataHex := fs.String("report-data", "", "hex-encoded report data, up to 64 bytes")
-	outputPath := fs.String("output", "", "write JSON output to file")
-	ccelEventLogPath := fs.String("ccel-event-log", defaultCCELEventLogPath, "path to CCEL event log data")
-	if err := fs.Parse(args); err != nil {
-		return err
-	}
-
-	if *reportDataHex == "" {
-		return errors.New("missing required flag --report-data")
-	}
-	if *outputPath == "" {
-		return errors.New("missing required flag --output")
-	}
-
-	reportData, err := decodeReportData(*reportDataHex)
-	if err != nil {
-		return fmt.Errorf("decode report data: %w", err)
-	}
-
-	quoteProvider, err := client.GetQuoteProvider()
-	if err != nil {
-		return fmt.Errorf("get quote provider: %w", err)
-	}
-
-	rawQuote, err := client.GetRawQuote(quoteProvider, reportData)
-	if err != nil {
-		return fmt.Errorf("get TDX quote: %w", err)
-	}
-
-	events, err := readRTMR0Events(*ccelEventLogPath)
-	if err != nil {
-		return err
-	}
-
-	payload := outputPayload{
-		Quote:    base64.StdEncoding.EncodeToString(rawQuote),
-		EventLog: events,
-	}
-
-	return writeJSON(*outputPath, payload)
-}
-
-func runParseQuote(args []string) error {
-	fs := newFlagSet("parse-quote")
-	quotePath := fs.String("quote-file", "", "path to a raw TDX quote file")
-	outputPath := fs.String("output", "", "write JSON output to file")
-	if err := fs.Parse(args); err != nil {
-		return err
-	}
-
-	if *quotePath == "" {
-		return errors.New("missing required flag --quote-file")
-	}
-	if *outputPath == "" {
-		return errors.New("missing required flag --output")
-	}
-
-	rawQuote, err := os.ReadFile(*quotePath)
-	if err != nil {
-		return fmt.Errorf("read quote file %q: %w", *quotePath, err)
-	}
-
-	payload, err := parseQuote(rawQuote)
-	if err != nil {
-		return err
-	}
-
-	return writeJSON(*outputPath, payload)
-}
-
-func newFlagSet(name string) *flag.FlagSet {
-	fs := flag.NewFlagSet(name, flag.ContinueOnError)
-	fs.SetOutput(io.Discard)
-	return fs
-}
-
-func writeJSON(outputPath string, payload any) error {
-	jsonData, err := json.MarshalIndent(payload, "", "  ")
-	if err != nil {
-		return fmt.Errorf("marshal JSON: %w", err)
-	}
-
-	if err := os.WriteFile(outputPath, append(jsonData, '\n'), 0o644); err != nil {
-		return fmt.Errorf("write output file %q: %w", outputPath, err)
-	}
-
-	return nil
-}
-
-func parseQuote(rawQuote []byte) (parsedQuotePayload, error) {
-	anyQuote, err := abi.QuoteToProto(rawQuote)
-	if err != nil {
-		return parsedQuotePayload{}, fmt.Errorf("parse quote: %w", err)
-	}
-
-	switch quote := anyQuote.(type) {
-	case *pb.QuoteV4:
-		tdQuoteBody := quote.GetTdQuoteBody()
-		if tdQuoteBody == nil {
-			return parsedQuotePayload{}, errors.New("parse quote: missing TD quote body")
-		}
-
-		rtmrs := tdQuoteBody.GetRtmrs()
-		if len(rtmrs) != 4 {
-			return parsedQuotePayload{}, fmt.Errorf("parse quote: expected exactly 4 RTMRs, got %d", len(rtmrs))
-		}
-
-		return parsedQuotePayload{
-			ReportData:   hex.EncodeToString(tdQuoteBody.GetReportData()),
-			TDAttributes: hex.EncodeToString(tdQuoteBody.GetTdAttributes()),
-			MRTD:         hex.EncodeToString(tdQuoteBody.GetMrTd()),
-			RTMR0:        hex.EncodeToString(rtmrs[0]),
-			RTMR1:        hex.EncodeToString(rtmrs[1]),
-			RTMR2:        hex.EncodeToString(rtmrs[2]),
-			RTMR3:        hex.EncodeToString(rtmrs[3]),
-		}, nil
-	default:
-		return parsedQuotePayload{}, fmt.Errorf("parse quote: unsupported quote type %T", anyQuote)
-	}
-}
-
-func usageError(message string) error {
-	return fmt.Errorf("%s\nusage:\n  %s attest --report-data <hex> --output <file> [--ccel-event-log <path>]\n  %s parse-quote --quote-file <path> --output <file>", message, os.Args[0], os.Args[0])
-}
-
-func decodeReportData(raw string) ([64]byte, error) {
-	var reportData [64]byte
-
-	normalized := strings.TrimSpace(raw)
-	normalized = strings.TrimPrefix(normalized, "0x")
-	normalized = strings.TrimPrefix(normalized, "0X")
-
-	decoded, err := hex.DecodeString(normalized)
-	if err != nil {
-		return reportData, err
-	}
-	if len(decoded) > len(reportData) {
-		return reportData, fmt.Errorf("report data is %d bytes, exceeds 64 bytes", len(decoded))
-	}
-
-	copy(reportData[:], decoded)
-	return reportData, nil
-}
-
-func readRTMR0Events(eventLogPath string) ([]eventRecord, error) {
-	eventLogData, err := os.ReadFile(eventLogPath)
-	if err != nil {
-		return nil, fmt.Errorf("read CCEL event log %q: %w", eventLogPath, err)
-	}
-
-	eventLog, err := tcg.ParseEventLog(eventLogData, tcg.ParseOpts{AllowPadding: true})
-	if err != nil {
-		return nil, fmt.Errorf("parse CCEL event log %q: %w", eventLogPath, err)
-	}
-
-	records := make([]eventRecord, 0)
-	for _, event := range eventLog.Events(register.HashSHA384) {
-		if event.MRIndex() != rtmr0MRIndex {
-			continue
-		}
-
-		records = append(records, eventRecord{
-			Type:   eventTypeTCGString(event.UntrustedType()),
-			Digest: hex.EncodeToString(event.ReplayedDigest()),
-		})
-	}
-
-	return records, nil
-}
-
-func eventTypeTCGString(eventType any) string {
-	if typed, ok := eventType.(interface{ TCGString() string }); ok {
-		return typed.TCGString()
-	}
-
-	return fmt.Sprintf("%v", eventType)
-}