@super-protocol/pki-attestation-engine 4.0.0 → 4.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -5,38 +5,55 @@ const sp_nvtrust_wrapper_1 = require("@super-protocol/sp-nvtrust-wrapper");
|
|
|
5
5
|
const crypto_1 = require("crypto");
|
|
6
6
|
class ChallengeNvidiaCCHelper {
|
|
7
7
|
static async getNvidiaToken(logger) {
|
|
8
|
+
const log = logger?.child({
|
|
9
|
+
helper: 'ChallengeNvidiaCCHelper',
|
|
10
|
+
});
|
|
8
11
|
try {
|
|
9
12
|
//TODO: add nvswitchToken here
|
|
10
13
|
const wrapper = new sp_nvtrust_wrapper_1.NvtrustWrapper();
|
|
11
14
|
const topology = await wrapper.getGPUTopology();
|
|
15
|
+
log?.debug('NVIDIA GPU topology detected', {
|
|
16
|
+
gpuCount: topology.gpuCount,
|
|
17
|
+
nvswitchCount: topology.nvswitchCount,
|
|
18
|
+
});
|
|
12
19
|
if (!topology.gpuCount) {
|
|
20
|
+
log?.info('Challenge NVIDIA token present: false');
|
|
21
|
+
log?.info('NVIDIA token retrieval skipped: no GPUs detected in topology');
|
|
13
22
|
return;
|
|
14
23
|
}
|
|
15
24
|
const nonce = sp_nvtrust_wrapper_1.NvtrustWrapper.generateNonce();
|
|
25
|
+
log?.debug('Attempting NVIDIA token retrieval for detected GPUs', {
|
|
26
|
+
gpuCount: topology.gpuCount,
|
|
27
|
+
});
|
|
16
28
|
const gpuTokenRaw = await wrapper.getNvidiaToken({
|
|
17
29
|
device: sp_nvtrust_wrapper_1.NvidiaDeviceType.GPU,
|
|
18
30
|
nonce,
|
|
19
31
|
ppcieMode: false,
|
|
20
32
|
});
|
|
33
|
+
log?.info('Challenge NVIDIA token present: true');
|
|
34
|
+
log?.info('NVIDIA token retrieved successfully', {
|
|
35
|
+
gpuCount: topology.gpuCount,
|
|
36
|
+
nvswitchCount: topology.nvswitchCount,
|
|
37
|
+
});
|
|
21
38
|
return { gpuToken: gpuTokenRaw.jwt };
|
|
22
39
|
}
|
|
23
40
|
catch (error) {
|
|
24
41
|
if (error instanceof sp_nvtrust_wrapper_1.NvtrustWrapperCallError) {
|
|
25
|
-
|
|
42
|
+
log?.error(`NvtrustWrapperCallError: ${error.message}`);
|
|
26
43
|
if (error.traceback?.trim()) {
|
|
27
|
-
|
|
44
|
+
log?.debug(`Traceback:\n${error.traceback}`);
|
|
28
45
|
}
|
|
29
46
|
const logEntries = Object.entries(error.logs ?? {});
|
|
30
47
|
if (logEntries.length > 0) {
|
|
31
|
-
|
|
48
|
+
log?.debug('Logs from nvtrust wrapper:');
|
|
32
49
|
for (const [fileName, logContent] of logEntries) {
|
|
33
|
-
|
|
34
|
-
|
|
50
|
+
log?.debug(`--- ${fileName} ---`);
|
|
51
|
+
log?.debug(String(logContent));
|
|
35
52
|
}
|
|
36
53
|
}
|
|
37
54
|
}
|
|
38
55
|
else {
|
|
39
|
-
|
|
56
|
+
log?.error(`Error during NVIDIA token retrieval: ${error}`);
|
|
40
57
|
}
|
|
41
58
|
throw error;
|
|
42
59
|
}
|
|
@@ -47,6 +64,9 @@ class ChallengeNvidiaCCHelper {
|
|
|
47
64
|
return hash.digest();
|
|
48
65
|
}
|
|
49
66
|
static async getTokenAndCombinedChallengeData(baseUserData, logger) {
|
|
67
|
+
const log = logger?.child({
|
|
68
|
+
helper: 'ChallengeNvidiaCCHelper',
|
|
69
|
+
});
|
|
50
70
|
const nvidiaTokens = await ChallengeNvidiaCCHelper.getNvidiaToken(logger);
|
|
51
71
|
const nvidiaTokenHash = nvidiaTokens && ChallengeNvidiaCCHelper.getTokenHash(nvidiaTokens);
|
|
52
72
|
const challengeData = nvidiaTokenHash
|
|
@@ -55,8 +75,13 @@ class ChallengeNvidiaCCHelper {
|
|
|
55
75
|
if (challengeData.length > 64) {
|
|
56
76
|
throw new Error('challengeData length exceeds 64 bytes');
|
|
57
77
|
}
|
|
78
|
+
log?.debug('Prepared combined challenge data', {
|
|
79
|
+
baseUserDataLength: baseUserData.length,
|
|
80
|
+
challengeDataLength: challengeData.length,
|
|
81
|
+
hasNvidiaToken: Boolean(nvidiaTokens),
|
|
82
|
+
});
|
|
58
83
|
return { nvidiaTokens, challengeData };
|
|
59
84
|
}
|
|
60
85
|
}
|
|
61
86
|
exports.ChallengeNvidiaCCHelper = ChallengeNvidiaCCHelper;
|
|
62
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
87
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -12,10 +12,16 @@ class ChallengeValidatorNvidia {
|
|
|
12
12
|
this.config = config;
|
|
13
13
|
}
|
|
14
14
|
async validate(challenge, userData, networkType) {
|
|
15
|
-
this.log.
|
|
16
|
-
|
|
15
|
+
const log = this.log.child({
|
|
16
|
+
validator: 'ChallengeValidatorNvidia',
|
|
17
|
+
});
|
|
18
|
+
const hasNvidiaToken = (0, pki_common_1.hasChallengeNvidiaToken)(challenge);
|
|
19
|
+
log.debug(`Challenge NVIDIA token present: ${hasNvidiaToken}`);
|
|
20
|
+
if (!hasNvidiaToken) {
|
|
21
|
+
log.debug('NVIDIA validation skipped: challenge does not contain NVIDIA token');
|
|
17
22
|
return;
|
|
18
23
|
}
|
|
24
|
+
log.debug(`NVIDIA validation started for networkType=${networkType ?? 'undefined'}`);
|
|
19
25
|
const tokenHash = challengeProvider_1.ChallengeNvidiaCCHelper.getTokenHash(challenge.nvidiaTokens);
|
|
20
26
|
if (userData.length < 64) {
|
|
21
27
|
throw new Error('userData must be at least 64 bytes');
|
|
@@ -23,10 +29,11 @@ class ChallengeValidatorNvidia {
|
|
|
23
29
|
const expectedHash = userData.slice(32, 64);
|
|
24
30
|
const tokenHashHex = tokenHash.toString('hex');
|
|
25
31
|
const expectedHashHex = expectedHash.toString('hex');
|
|
26
|
-
|
|
32
|
+
log.debug(`NVIDIA tokenHash: ${tokenHashHex}, expectedHash: ${expectedHashHex}`);
|
|
27
33
|
if (tokenHashHex !== expectedHashHex) {
|
|
28
34
|
throw new Error('Nvidia hash included in the challenge does not match the hash of the nvidia token specified in the request');
|
|
29
35
|
}
|
|
36
|
+
log.info('NVIDIA validation passed: token hash matches attested userData hash');
|
|
30
37
|
const nvtrusWrapper = new sp_nvtrust_wrapper_1.NvtrustWrapper(this.config?.tmp ?? '/sp/nvtrust-tmp', this.config?.timeout ?? 60000);
|
|
31
38
|
let nvidiaTokenValidationResult = {
|
|
32
39
|
success: false,
|
|
@@ -40,6 +47,7 @@ class ChallengeValidatorNvidia {
|
|
|
40
47
|
if (nvidiaTokenValidationResult.success !== true) {
|
|
41
48
|
throw new Error('Failed to verify Nvidia GPU token: validateToken returned success=false');
|
|
42
49
|
}
|
|
50
|
+
log.info('NVIDIA validation passed: nvtrust token verification succeeded');
|
|
43
51
|
if (networkType === 'trusted') {
|
|
44
52
|
const gpusInfo = sp_nvtrust_wrapper_1.NvtrustWrapper.extractGPUInfoFromToken({
|
|
45
53
|
jwt: challenge.nvidiaTokens.gpuToken,
|
|
@@ -53,29 +61,33 @@ class ChallengeValidatorNvidia {
|
|
|
53
61
|
const debugGpuNumbersText = debugGpuNumbers.join(', ');
|
|
54
62
|
throw new Error(`Trusted network does not allow NVIDIA GPUs with dbgStat=true. Debug enabled on GPU(s): ${debugGpuNumbersText}`);
|
|
55
63
|
}
|
|
64
|
+
log.info(`NVIDIA trusted policy check passed: dbgStat=false on all ${gpusInfo.gpus.length} GPU(s)`);
|
|
65
|
+
}
|
|
66
|
+
else {
|
|
67
|
+
log.info(`NVIDIA trusted-only GPU debug policy check skipped for networkType=${networkType ?? 'undefined'}`);
|
|
56
68
|
}
|
|
57
69
|
}
|
|
58
70
|
catch (error) {
|
|
59
71
|
if (error instanceof sp_nvtrust_wrapper_1.NvtrustWrapperCallError) {
|
|
60
|
-
|
|
72
|
+
log.error(`NvtrustWrapperCallError: ${error.message}`);
|
|
61
73
|
if (error.traceback?.trim()) {
|
|
62
|
-
|
|
74
|
+
log.debug(`Traceback:\n${error.traceback}`);
|
|
63
75
|
}
|
|
64
76
|
const logEntries = Object.entries(error.logs ?? {});
|
|
65
77
|
if (logEntries.length > 0) {
|
|
66
|
-
|
|
78
|
+
log.debug('Logs from nvtrust wrapper:');
|
|
67
79
|
for (const [fileName, logContent] of logEntries) {
|
|
68
|
-
|
|
69
|
-
|
|
80
|
+
log.debug(`--- ${fileName} ---`);
|
|
81
|
+
log.debug(String(logContent));
|
|
70
82
|
}
|
|
71
83
|
}
|
|
72
84
|
}
|
|
73
85
|
else {
|
|
74
|
-
|
|
86
|
+
log.error(`Error during NVIDIA token validation: ${error}`);
|
|
75
87
|
}
|
|
76
88
|
throw error;
|
|
77
89
|
}
|
|
78
90
|
}
|
|
79
91
|
}
|
|
80
92
|
exports.ChallengeValidatorNvidia = ChallengeValidatorNvidia;
|
|
81
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
93
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY2hhbGxlbmdlVmFsaWRhdG9yTnZpZGlhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vc3JjL2NoYWxsZW5nZVZhbGlkYXRvci9jaGFsbGVuZ2VWYWxpZGF0b3JOdmlkaWEudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUEsMkVBTTRDO0FBRTVDLDJEQUlvQztBQUNwQyw0REFBK0Q7QUFHL0QsTUFBYSx3QkFBd0I7SUFFWjtJQUNBO0lBRnJCLFlBQ3FCLEdBQVEsRUFDUixNQUE2QjtRQUQ3QixRQUFHLEdBQUgsR0FBRyxDQUFLO1FBQ1IsV0FBTSxHQUFOLE1BQU0sQ0FBdUI7SUFDL0MsQ0FBQztJQUVKLEtBQUssQ0FBQyxRQUFRLENBQ1YsU0FBb0IsRUFDcEIsUUFBZ0IsRUFDaEIsV0FBeUI7UUFFekIsTUFBTSxHQUFHLEdBQUcsSUFBSSxDQUFDLEdBQUcsQ0FBQyxLQUFLLENBQUM7WUFDdkIsU0FBUyxFQUFFLDBCQUEwQjtTQUN4QyxDQUFDLENBQUM7UUFDSCxNQUFNLGNBQWMsR0FBRyxJQUFBLG9DQUF1QixFQUFDLFNBQVMsQ0FBQyxDQUFDO1FBRTFELEdBQUcsQ0FBQyxLQUFLLENBQUMsbUNBQW1DLGNBQWMsRUFBRSxDQUFDLENBQUM7UUFDL0QsSUFBSSxDQUFDLGNBQWMsRUFBRSxDQUFDO1lBQ2xCLEdBQUcsQ0FBQyxLQUFLLENBQ0wsb0VBQW9FLENBQ3ZFLENBQUM7WUFDRixPQUFPO1FBQ1gsQ0FBQztRQUNELEdBQUcsQ0FBQyxLQUFLLENBQ0wsNkNBQTZDLFdBQVcsSUFBSSxXQUFXLEVBQUUsQ0FDNUUsQ0FBQztRQUVGLE1BQU0sU0FBUyxHQUFHLDJDQUF1QixDQUFDLFlBQVksQ0FDbEQsU0FBUyxDQUFDLFlBQVksQ0FDekIsQ0FBQztRQUVGLElBQUksUUFBUSxDQUFDLE1BQU0sR0FBRyxFQUFFLEVBQUUsQ0FBQztZQUN2QixNQUFNLElBQUksS0FBSyxDQUFDLG9DQUFvQyxDQUFDLENBQUM7UUFDMUQsQ0FBQztRQUNELE1BQU0sWUFBWSxHQUFHLFFBQVEsQ0FBQyxLQUFLLENBQUMsRUFBRSxFQUFFLEVBQUUsQ0FBQyxDQUFDO1FBQzVDLE1BQU0sWUFBWSxHQUFHLFNBQVMsQ0FBQyxRQUFRLENBQUMsS0FBSyxDQUFDLENBQUM7UUFDL0MsTUFBTSxlQUFlLEdBQUcsWUFBWSxDQUFDLFFBQVEsQ0FBQyxLQUFLLENBQUMsQ0FBQztRQUNyRCxHQUFHLENBQUMsS0FBSyxDQUNMLHFCQUFxQixZQUFZLG1CQUFtQixlQUFlLEVBQUUsQ0FDeEUsQ0FBQztRQUNGLElBQUksWUFBWSxLQUFLLGVBQWUsRUFBRSxDQUFDO1lBQ25DLE1BQU0sSUFBSSxLQUFLLENBQ1gsNEdBQTRHLENBQy9HLENBQUM7UUFDTixDQUFDO1FBQ0QsR0FBRyxDQUFDLElBQUksQ0FDSixxRUFBcUUsQ0FDeEUsQ0FBQztRQUVGLE1BQU0sYUFBYSxHQUFHLElBQUksbUNBQWMsQ0FDcEMsSUFBSSxDQUFDLE1BQU0sRUFBRSxHQUFHLElBQUksaUJBQWlCLEVBQ3JDLElBQUksQ0FBQyxNQUFNLEVBQUUsT0FBTyxJQUFJLEtBQUssQ0FDaEMsQ0FBQztRQUVGLElBQUksMkJBQTJCLEdBQXVCO1lBQ2xELE9BQU8sRUFBRSxLQUFLO1NBQ2pCLENBQUM7UUFDRixJQUFJLENBQUM7WUFDRCwyQkFBMkIsR0FBRyxNQUFNLGFBQWEsQ0FBQyxhQUFhLENBQUM7Z0JBQzVELE1BQU0sRUFBRSxxQ0FBZ0IsQ0FBQyxHQUFHO2dCQUM1QixNQUFNLEVBQUUscUNBQWdCO2dCQUN4QixLQUFLLEVBQUUsRUFBRSxHQUFHLEVBQUUsU0FBUyxDQUFDLFlBQVksQ0FBQyxRQUFRLEVBQUU7YUFDbEQsQ0FBQyxDQUFDO1lBQ0gsSUFBSSwyQkFBMkIsQ0FBQyxPQUFPLEtBQUssSUFBSSxFQUFFLENBQUM7Z0JBQy9DLE1BQU0sSUFBSSxLQUFLLENBQ1gseUVBQXlFLENBQzVFLENBQUM7WUFDTixDQUFDO1lBQ0QsR0FBRyxDQUFDLElBQUksQ0FDSixnRUFBZ0UsQ0FDbkUsQ0FBQztZQUVGLElBQUksV0FBVyxLQUFLLFNBQVMsRUFBRSxDQUFDO2dCQUM1QixNQUFNLFFBQVEsR0FBRyxtQ0FBYyxDQUFDLHVCQUF1QixDQUFDO29CQUNwRCxHQUFHLEVBQUUsU0FBUyxDQUFDLFlBQVksQ0FBQyxRQUFRO2lCQUN2QyxDQUFDLENBQUM7Z0JBQ0gsTUFBTSxlQUFlLEdBQUcsUUFBUSxDQUFDLElBQUk7cUJBQ2hDLEdBQUcsQ0FBQyxDQUFDLEdBQUcsRUFBRSxLQUFLLEVBQUUsRUFBRSxDQUFDLENBQUMsRUFBRSxHQUFHLEVBQUUsU0FBUyxFQUFFLEtBQUssR0FBRyxDQUFDLEVBQUUsQ0FBQyxDQUFDO3FCQUNwRCxNQUFNLENBQUMsQ0FBQyxFQUFFLEdBQUcsRUFBRSxFQUFFLEVBQUUsQ0FBQyxHQUFHLENBQUMsT0FBTyxLQUFLLElBQUksQ0FBQztxQkFDekMsR0FBRyxDQUFDLENBQUMsRUFBRSxTQUFTLEVBQUUsRUFBRSxFQUFFLENBQUMsU0FBUyxDQUFDLENBQUM7Z0JBQ3ZDLE1BQU0sa0JBQWtCLEdBQUcsZUFBZSxDQUFDLE1BQU0sR0FBRyxDQUFDLENBQUM7Z0JBQ3RELElBQUksa0JBQWtCLEVBQUUsQ0FBQztvQkFDckIsTUFBTSxtQkFBbUIsR0FBRyxlQUFlLENBQUMsSUFBSSxDQUFDLElBQUksQ0FBQyxDQUFDO29CQUN2RCxNQUFNLElBQUksS0FBSyxDQUNYLDBGQUEwRixtQkFBbUIsRUFBRSxDQUNsSCxDQUFDO2dCQUNOLENBQUM7Z0JBQ0QsR0FBRyxDQUFDLElBQUksQ0FDSiw0REFBNEQsUUFBUSxDQUFDLElBQUksQ0FBQyxNQUFNLFNBQVMsQ0FDNUYsQ0FBQztZQUNOLENBQUM7aUJBQU0sQ0FBQztnQkFDSixHQUFHLENBQUMsSUFBSSxDQUNKLHNFQUFzRSxXQUFXLElBQUksV0FBVyxFQUFFLENBQ3JHLENBQUM7WUFDTixDQUFDO1FBQ0wsQ0FBQztRQUFDLE9BQU8sS0FBSyxFQUFFLENBQUM7WUFDYixJQUFJLEtBQUssWUFBWSw0Q0FBdUIsRUFBRSxDQUFDO2dCQUMzQyxHQUFHLENBQUMsS0FBSyxDQUFDLDRCQUE0QixLQUFLLENBQUMsT0FBTyxFQUFFLENBQUMsQ0FBQztnQkFDdkQsSUFBSSxLQUFLLENBQUMsU0FBUyxFQUFFLElBQUksRUFBRSxFQUFFLENBQUM7b0JBQzFCLEdBQUcsQ0FBQyxLQUFLLENBQUMsZUFBZSxLQUFLLENBQUMsU0FBUyxFQUFFLENBQUMsQ0FBQztnQkFDaEQsQ0FBQztnQkFDRCxNQUFNLFVBQVUsR0FBRyxNQUFNLENBQUMsT0FBTyxDQUFDLEtBQUssQ0FBQyxJQUFJLElBQUksRUFBRSxDQUFDLENBQUM7Z0JBQ3BELElBQUksVUFBVSxDQUFDLE1BQU0sR0FBRyxDQUFDLEVBQUUsQ0FBQztvQkFDeEIsR0FBRyxDQUFDLEtBQUssQ0FBQyw0QkFBNEIsQ0FBQyxDQUFDO29CQUN4QyxLQUFLLE1BQU0sQ0FBQyxRQUFRLEVBQUUsVUFBVSxDQUFDLElBQUksVUFBVSxFQUFFLENBQUM7d0JBQzlDLEdBQUcsQ0FBQyxLQUFLLENBQUMsT0FBTyxRQUFRLE1BQU0sQ0FBQyxDQUFDO3dCQUNqQyxHQUFHLENBQUMsS0FBSyxDQUFDLE1BQU0sQ0FBQyxVQUFVLENBQUMsQ0FBQyxDQUFDO29CQUNsQyxDQUFDO2dCQUNMLENBQUM7WUFDTCxDQUFDO2lCQUFNLENBQUM7Z0JBQ0osR0FBRyxDQUFDLEtBQUssQ0FBQyx5Q0FBeUMsS0FBSyxFQUFFLENBQUMsQ0FBQztZQUNoRSxDQUFDO1lBRUQsTUFBTSxLQUFLLENBQUM7UUFDaEIsQ0FBQztJQUNMLENBQUM7Q0FDSjtBQXBIRCw0REFvSEMifQ==
|