Class: Google::Cloud::ConfidentialComputing::V1::TpmAttestation

Inherits:
Object
  • Object
show all
Extended by:
Protobuf::MessageExts::ClassMethods
Includes:
Protobuf::MessageExts
Defined in:
proto_docs/google/cloud/confidentialcomputing/v1/service.rb

Overview

TPM2 data containing everything necessary to validate any platform state measured into the TPM.

Defined Under Namespace

Classes: Quote

Instance Attribute Summary collapse

Instance Attribute Details

#ak_cert ⇒ ::String

Returns DER-encoded X.509 certificate of the Attestation Key (otherwise known as an AK or a TPM restricted signing key) used to generate the quotes.

Returns:

  • (::String) —

    DER-encoded X.509 certificate of the Attestation Key (otherwise known as an AK or a TPM restricted signing key) used to generate the quotes.



153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
 
# File 'proto_docs/google/cloud/confidentialcomputing/v1/service.rb', line 153

class TpmAttestation
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # Information about Platform Control Registers (PCRs) including a signature
  # over their values, which can be used for remote validation.
  # @!attribute [rw] hash_algo
  #   @return [::Integer]
  #     The hash algorithm of the PCR bank being quoted, encoded as a TPM_ALG_ID
  # @!attribute [rw] pcr_values
  #   @return [::Google::Protobuf::Map{::Integer => ::String}]
  #     Raw binary values of each PCRs being quoted.
  # @!attribute [rw] raw_quote
  #   @return [::String]
  #     TPM2 quote, encoded as a TPMS_ATTEST
  # @!attribute [rw] raw_signature
  #   @return [::String]
  #     TPM2 signature, encoded as a TPMT_SIGNATURE
  class Quote
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods

    # @!attribute [rw] key
    #   @return [::Integer]
    # @!attribute [rw] value
    #   @return [::String]
    class PcrValuesEntry
      include ::Google::Protobuf::MessageExts
      extend ::Google::Protobuf::MessageExts::ClassMethods
    end
  end
end

#canonical_event_log ⇒ ::String

Returns An Event Log containing additional events measured into the TPM that are not already present in the tcg_event_log. Formatted as described in the "Canonical Event Log Format" TCG Specification.

Returns:

  • (::String) —

    An Event Log containing additional events measured into the TPM that are not already present in the tcg_event_log. Formatted as described in the "Canonical Event Log Format" TCG Specification.



153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
 
# File 'proto_docs/google/cloud/confidentialcomputing/v1/service.rb', line 153

class TpmAttestation
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # Information about Platform Control Registers (PCRs) including a signature
  # over their values, which can be used for remote validation.
  # @!attribute [rw] hash_algo
  #   @return [::Integer]
  #     The hash algorithm of the PCR bank being quoted, encoded as a TPM_ALG_ID
  # @!attribute [rw] pcr_values
  #   @return [::Google::Protobuf::Map{::Integer => ::String}]
  #     Raw binary values of each PCRs being quoted.
  # @!attribute [rw] raw_quote
  #   @return [::String]
  #     TPM2 quote, encoded as a TPMS_ATTEST
  # @!attribute [rw] raw_signature
  #   @return [::String]
  #     TPM2 signature, encoded as a TPMT_SIGNATURE
  class Quote
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods

    # @!attribute [rw] key
    #   @return [::Integer]
    # @!attribute [rw] value
    #   @return [::String]
    class PcrValuesEntry
      include ::Google::Protobuf::MessageExts
      extend ::Google::Protobuf::MessageExts::ClassMethods
    end
  end
end

#cert_chain ⇒ ::Array<::String>

Returns List of DER-encoded X.509 certificates which, together with the ak_cert, chain back to a trusted Root Certificate.

Returns:

  • (::Array<::String>) —

    List of DER-encoded X.509 certificates which, together with the ak_cert, chain back to a trusted Root Certificate.



153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
 
# File 'proto_docs/google/cloud/confidentialcomputing/v1/service.rb', line 153

class TpmAttestation
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # Information about Platform Control Registers (PCRs) including a signature
  # over their values, which can be used for remote validation.
  # @!attribute [rw] hash_algo
  #   @return [::Integer]
  #     The hash algorithm of the PCR bank being quoted, encoded as a TPM_ALG_ID
  # @!attribute [rw] pcr_values
  #   @return [::Google::Protobuf::Map{::Integer => ::String}]
  #     Raw binary values of each PCRs being quoted.
  # @!attribute [rw] raw_quote
  #   @return [::String]
  #     TPM2 quote, encoded as a TPMS_ATTEST
  # @!attribute [rw] raw_signature
  #   @return [::String]
  #     TPM2 signature, encoded as a TPMT_SIGNATURE
  class Quote
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods

    # @!attribute [rw] key
    #   @return [::Integer]
    # @!attribute [rw] value
    #   @return [::String]
    class PcrValuesEntry
      include ::Google::Protobuf::MessageExts
      extend ::Google::Protobuf::MessageExts::ClassMethods
    end
  end
end

#quotes ⇒ ::Array<::Google::Cloud::ConfidentialComputing::V1::TpmAttestation::Quote>

Returns TPM2 PCR Quotes generated by calling TPM2_Quote on each PCR bank.

Returns:



153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
 
# File 'proto_docs/google/cloud/confidentialcomputing/v1/service.rb', line 153

class TpmAttestation
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # Information about Platform Control Registers (PCRs) including a signature
  # over their values, which can be used for remote validation.
  # @!attribute [rw] hash_algo
  #   @return [::Integer]
  #     The hash algorithm of the PCR bank being quoted, encoded as a TPM_ALG_ID
  # @!attribute [rw] pcr_values
  #   @return [::Google::Protobuf::Map{::Integer => ::String}]
  #     Raw binary values of each PCRs being quoted.
  # @!attribute [rw] raw_quote
  #   @return [::String]
  #     TPM2 quote, encoded as a TPMS_ATTEST
  # @!attribute [rw] raw_signature
  #   @return [::String]
  #     TPM2 signature, encoded as a TPMT_SIGNATURE
  class Quote
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods

    # @!attribute [rw] key
    #   @return [::Integer]
    # @!attribute [rw] value
    #   @return [::String]
    class PcrValuesEntry
      include ::Google::Protobuf::MessageExts
      extend ::Google::Protobuf::MessageExts::ClassMethods
    end
  end
end

#tcg_event_log ⇒ ::String

Returns The binary TCG Event Log containing events measured into the TPM by the platform firmware and operating system. Formatted as described in the "TCG PC Client Platform Firmware Profile Specification".

Returns:

  • (::String) —

    The binary TCG Event Log containing events measured into the TPM by the platform firmware and operating system. Formatted as described in the "TCG PC Client Platform Firmware Profile Specification".



153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
 
# File 'proto_docs/google/cloud/confidentialcomputing/v1/service.rb', line 153

class TpmAttestation
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # Information about Platform Control Registers (PCRs) including a signature
  # over their values, which can be used for remote validation.
  # @!attribute [rw] hash_algo
  #   @return [::Integer]
  #     The hash algorithm of the PCR bank being quoted, encoded as a TPM_ALG_ID
  # @!attribute [rw] pcr_values
  #   @return [::Google::Protobuf::Map{::Integer => ::String}]
  #     Raw binary values of each PCRs being quoted.
  # @!attribute [rw] raw_quote
  #   @return [::String]
  #     TPM2 quote, encoded as a TPMS_ATTEST
  # @!attribute [rw] raw_signature
  #   @return [::String]
  #     TPM2 signature, encoded as a TPMT_SIGNATURE
  class Quote
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods

    # @!attribute [rw] key
    #   @return [::Integer]
    # @!attribute [rw] value
    #   @return [::String]
    class PcrValuesEntry
      include ::Google::Protobuf::MessageExts
      extend ::Google::Protobuf::MessageExts::ClassMethods
    end
  end
end