Skip to content

feat(migtd): use TLV items for policy v2 pre-session data - #1094

Open
jyao1 wants to merge 1 commit into
intel:mainfrom
jyao1:presessiondata
Open

jyao1 wants to merge 1 commit into
intel:mainfrom
jyao1:presessiondata

Conversation

@jyao1

@jyao1 jyao1 commented Oct 24, 2026 •

Copy link
Copy Markdown
Contributor

Encode issuer chain, policyData and the optional TCB-mapping as type/length/value items (u32 type, u32 length); reject duplicates, unknown types and trailing bytes. Use pre-session version 0x0200.

Fix #1088

Assisted-by: Claude Code:claude-sonnet-5-5

@jyao1
jyao1 requested a review from sgrams as a code owner October 24, 2026 09:22
@jyao1 jyao1 closed this Oct 26, 2026
@jyao1 jyao1 reopened this Oct 26, 2026
@jyao1

jyao1 commented Oct 27, 2026

Copy link
Copy Markdown
Contributor Author

@haitaohuang @mingweishih
Could you please review this?

// Send our own signed CoRIM (if enrolled) so the peer resolves *our*
// current/init hashes through *our* authenticated mapping instead of
// theirs. Absent the `servtd_corim` feature, or when nothing is
// enrolled, send an explicit zero length. The peer must then use our JSON

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

please update comments for non-corim case

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That code is not introduced by this patch.

This patch does not change existing CoRIM or non-CoRIM.

This patch only uses TLV format for the pre-session data.

I think non-CoRIM should be handled by #1087.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ok. I can change that later.

Encode issuer chain, policyData and the optional TCB-mapping as
type/length/value items (u32 type, u32 length); reject duplicates,
unknown types and trailing bytes. Use pre-session version 0x0200.

Signed-off-by: Jiewen Yao <jiewen.yao@intel.com>
Assisted-by: Claude Code:claude-sonnet-5-5
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

presession data format change.

2 participants