@super-protocol/pki-client 1.6.2 → 1.6.3

package/dist/challengeProvider/challengeNvidiaCCHelper.d.ts

@@ -0,0 +1,10 @@
+/// <reference types="node" />
+import { NvidiaCCToken } from '@super-protocol/pki-common';
+export declare class ChallengeNvidiaCCHelper {
+    private static getNvidiaToken;
+    static getTokenHash(token: NvidiaCCToken): Buffer;
+    static getTokenAndCombinedChallengeData(baseUserData: Buffer): Promise<{
+        nvidiaTokens: NvidiaCCToken | undefined;
+        challengeData: Buffer;
+    }>;
+}

package/dist/challengeProvider/challengeNvidiaCCHelper.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChallengeNvidiaCCHelper = void 0;
+const sp_nvtrust_wrapper_1 = require("@super-protocol/sp-nvtrust-wrapper");
+const crypto_1 = require("crypto");
+class ChallengeNvidiaCCHelper {
+    static async getNvidiaToken() {
+        //TODO: add nvswitchToken here
+        const wrapper = new sp_nvtrust_wrapper_1.NvtrustWrapper();
+        const topology = await wrapper.getGPUTopology();
+        if (!topology.gpuCount) {
+            return;
+        }
+        const nonce = sp_nvtrust_wrapper_1.NvtrustWrapper.generateNonce();
+        const gpuTokenRaw = await wrapper.getNvidiaToken({
+            device: sp_nvtrust_wrapper_1.NvidiaDeviceType.GPU,
+            nonce,
+            ppcieMode: false,
+        });
+        return { gpuToken: gpuTokenRaw.jwt };
+    }
+    static getTokenHash(token) {
+        const hash = (0, crypto_1.createHash)('sha256');
+        hash.update(JSON.stringify(token));
+        return hash.digest();
+    }
+    static async getTokenAndCombinedChallengeData(baseUserData) {
+        const nvidiaTokens = await ChallengeNvidiaCCHelper.getNvidiaToken();
+        const nvidiaTokenHash = nvidiaTokens && ChallengeNvidiaCCHelper.getTokenHash(nvidiaTokens);
+        const challengeData = nvidiaTokenHash
+            ? Buffer.concat([baseUserData, nvidiaTokenHash])
+            : baseUserData;
+        if (challengeData.length > 64) {
+            throw new Error('challengeData length exceeds 64 bytes');
+        }
+        return { nvidiaTokens, challengeData };
+    }
+}
+exports.ChallengeNvidiaCCHelper = ChallengeNvidiaCCHelper;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/challengeProvider/challengeProviderSnp.js

@@ -24,18 +24,21 @@ var __importStar = (this && this.__importStar) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ChallengeProviderSNP = void 0;
+const challengeNvidiaCCHelper_1 = require("./challengeNvidiaCCHelper");
 const pki_common_1 = require("@super-protocol/pki-common");
 class ChallengeProviderSNP {
     async generateChallenge(userData) {
         // This module depends on native library that cannot be compiled for all architectures / operating systems.
         // That is why we load it dynamically and use only when it's really needed.
         const { SgxNative } = await Promise.resolve().then(() => __importStar(require('@super-protocol/addons-tee')));
-        const report = await SgxNative.SevSNP.generateSNPReportWithChain(userData);
+        const { challengeData, nvidiaTokens } = await challengeNvidiaCCHelper_1.ChallengeNvidiaCCHelper.getTokenAndCombinedChallengeData(userData);
+        const report = await SgxNative.SevSNP.generateSNPReportWithChain(challengeData);
         return {
             type: pki_common_1.ChallengeType.AMDSEV,
             serializedReportBase64: SgxNative.SevSNP.serializeSNPReport(report).toString('base64'),
+            nvidiaTokens,
         };
     }
 }
 exports.ChallengeProviderSNP = ChallengeProviderSNP;
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY2hhbGxlbmdlUHJvdmlkZXJTbnAuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvY2hhbGxlbmdlUHJvdmlkZXIvY2hhbGxlbmdlUHJvdmlkZXJTbnAudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7QUFDQSwyREFBc0U7QUFFdEUsTUFBYSxvQkFBb0I7SUFDN0IsS0FBSyxDQUFDLGlCQUFpQixDQUFDLFFBQWdCO1FBQ3BDLDJHQUEyRztRQUMzRywyRUFBMkU7UUFDM0UsTUFBTSxFQUFFLFNBQVMsRUFBRSxHQUFHLHdEQUFhLDRCQUE0QixHQUFDLENBQUM7UUFFakUsTUFBTSxNQUFNLEdBQ1IsTUFBTSxTQUFTLENBQUMsTUFBTSxDQUFDLDBCQUEwQixDQUFDLFFBQVEsQ0FBQyxDQUFDO1FBQ2hFLE9BQU87WUFDSCxJQUFJLEVBQUUsMEJBQWEsQ0FBQyxNQUFNO1lBQzFCLHNCQUFzQixFQUNsQixTQUFTLENBQUMsTUFBTSxDQUFDLGtCQUFrQixDQUFDLE1BQU0sQ0FBQyxDQUFDLFFBQVEsQ0FBQyxRQUFRLENBQUM7U0FDckUsQ0FBQztJQUNOLENBQUM7Q0FDSjtBQWRELG9EQWNDIn0=
+//# sourceMappingURL=data:application/json;base64,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

package/dist/challengeProvider/challengeProviderTdx.js

@@ -24,19 +24,22 @@ var __importStar = (this && this.__importStar) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ChallengeProviderTdx = void 0;
+const challengeNvidiaCCHelper_1 = require("./challengeNvidiaCCHelper");
 const pki_common_1 = require("@super-protocol/pki-common");
 class ChallengeProviderTdx {
     async generateChallenge(userData) {
         // This module depends on native library that cannot be compiled for all architectures / operating systems.
         // That is why we load it dynamically and use only when it's really needed.
         const { SgxNative } = await Promise.resolve().then(() => __importStar(require('@super-protocol/addons-tee')));
+        const { challengeData, nvidiaTokens } = await challengeNvidiaCCHelper_1.ChallengeNvidiaCCHelper.getTokenAndCombinedChallengeData(userData);
         const dcapVerifyService = new SgxNative.DcapQuoteVerifyService();
-        const quoteData = await dcapVerifyService.generateTDXQuote(userData);
+        const quoteData = await dcapVerifyService.generateTDXQuote(challengeData);
         return {
             type: pki_common_1.ChallengeType.TDX,
             quoteBase64: quoteData.toString('base64'),
+            nvidiaTokens,
         };
     }
 }
 exports.ChallengeProviderTdx = ChallengeProviderTdx;
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY2hhbGxlbmdlUHJvdmlkZXJUZHguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvY2hhbGxlbmdlUHJvdmlkZXIvY2hhbGxlbmdlUHJvdmlkZXJUZHgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7QUFDQSwyREFBc0U7QUFFdEUsTUFBYSxvQkFBb0I7SUFDN0IsS0FBSyxDQUFDLGlCQUFpQixDQUFDLFFBQWdCO1FBQ3BDLDJHQUEyRztRQUMzRywyRUFBMkU7UUFDM0UsTUFBTSxFQUFFLFNBQVMsRUFBRSxHQUFHLHdEQUFhLDRCQUE0QixHQUFDLENBQUM7UUFFakUsTUFBTSxpQkFBaUIsR0FBRyxJQUFJLFNBQVMsQ0FBQyxzQkFBc0IsRUFBRSxDQUFDO1FBRWpFLE1BQU0sU0FBUyxHQUFHLE1BQU0saUJBQWlCLENBQUMsZ0JBQWdCLENBQUMsUUFBUSxDQUFDLENBQUM7UUFDckUsT0FBTztZQUNILElBQUksRUFBRSwwQkFBYSxDQUFDLEdBQUc7WUFDdkIsV0FBVyxFQUFFLFNBQVMsQ0FBQyxRQUFRLENBQUMsUUFBUSxDQUFDO1NBQzVDLENBQUM7SUFDTixDQUFDO0NBQ0o7QUFkRCxvREFjQyJ9
+//# sourceMappingURL=data:application/json;base64,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

package/dist/challengeProvider/index.d.ts

@@ -3,3 +3,4 @@ export * from './challengeProviderSgx';
 export * from './challengeProviderTdx';
 export * from './challengeProviderUntrusted';
 export * from './challengeProviderSnp';
+export * from './challengeNvidiaCCHelper';

package/dist/challengeProvider/index.js

@@ -19,4 +19,5 @@ __exportStar(require("./challengeProviderSgx"), exports);
 __exportStar(require("./challengeProviderTdx"), exports);
 __exportStar(require("./challengeProviderUntrusted"), exports);
 __exportStar(require("./challengeProviderSnp"), exports);
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvY2hhbGxlbmdlUHJvdmlkZXIvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLHNEQUFvQztBQUNwQyx5REFBdUM7QUFDdkMseURBQXVDO0FBQ3ZDLCtEQUE2QztBQUM3Qyx5REFBdUMifQ==
+__exportStar(require("./challengeNvidiaCCHelper"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvY2hhbGxlbmdlUHJvdmlkZXIvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLHNEQUFvQztBQUNwQyx5REFBdUM7QUFDdkMseURBQXVDO0FBQ3ZDLCtEQUE2QztBQUM3Qyx5REFBdUM7QUFDdkMsNERBQTBDIn0=

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@super-protocol/pki-client",
-  "version": "1.6.2",
+  "version": "1.6.3",
   "public": true,
   "description": "",
   "main": "dist/index.js",
@@ -20,9 +20,10 @@
   "author": "Super Protocol",
   "license": "ISC",
   "dependencies": {
-    "@super-protocol/addons-tee": "^0.9.0",
+    "@super-protocol/addons-tee": "^0.9.3",
     "@super-protocol/pki-api-client": "*",
     "@super-protocol/pki-common": "*",
+    "@super-protocol/sp-nvtrust-wrapper": "^1.0.8",
     "yaml": "^2.6.0"
   }
-}
+}