Skip to content

feat(policy): add stable RTMR1 signer anchor and revocation #1035

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
haitaohuang wants to merge 8 commits into
base: main
Choose a base branch
from
+4,189 −1,379
Open

feat(policy): add stable RTMR1 signer anchor and revocation #1035

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
97a52c9
feat(policy): use complete TDINFO hash for TCB mappings
haitaohuang Sep 2, 2026
a1ba739
feat(migtd): authenticate one-hash source continuity
haitaohuang Sep 2, 2026
b6d7213
feat(migtd-hash): preserve cumulative TCB mappings
haitaohuang Sep 2, 2026
408461c
fix(migtd): preserve measured identity during mapping finalization
haitaohuang Sep 23, 2026
708d640
refactor(policy): remove unused engine ordering helper
haitaohuang Sep 29, 2026
e817c4c
feat(policy): add RTMR1 signer anchor revocation
haitaohuang Sep 4, 2026
33b8a14
test(migtd): cover signer revocation paths
haitaohuang Sep 11, 2026
8ed42d0
fix(policy): restrict servTD CRLs to the signing intermediate
haitaohuang Sep 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions Cargo.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion config/AzCVMEmu/tcb_mapping.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1 +1 @@
{"id":"BB9668CA-4EE8-4523-941A-B3B03BE46E03","version":1,"issueDate":"2025-01-01T00:00:00Z","nextUpdate":"2026-01-01T00:00:00Z","mrSigner":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","isvProdId":1,"svnMappings":[{"tdMeasurements":{"mrtd":"E2C7DA7CF0D93973480F0A34A6FE52A204EA81B4F1B6CD16018F5B4CAEE7B3B544A9738464A7C95E1705E20687A0ADA6","rtmr0":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","rtmr1":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"},"isvsvn":1}]}
{"id":"BB9668CA-4EE8-4523-941A-B3B03BE46E03","version":1,"issueDate":"2025-01-01T00:00:00Z","nextUpdate":"2026-01-01T00:00:00Z","mrSigner":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","isvProdId":1,"svnMappings":[]}
58 changes: 29 additions & 29 deletions config/templates/policy_issuer_chain.pem
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,46 +1,46 @@
-----BEGIN CERTIFICATE-----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bmZvIElzc3VlcjB2MBAGByqGSM49AgEGBSuBBAAiA2IABH9I8qjPEqZBX9wHgb22
PsC/Vpiz6e4lIwdECUQ/KX93GbdYyibzHRawiwumrMS3RR5XsOiJYckGfo7nhftB
oiqstrN7YwwIwu3dD2oPkU+rUNP73D5SoXvFvJH6GJRrl6NSMFAwDgYDVR0PAQH/
BAQDAgeAMB0GA1UdDgQWBBTeyxHNTE9IvgE9axy/ShWr7G1+bjAfBgNVHSMEGDAW
gBSHF2xOeJ5+gddXjL9uv1sVWS2cmDAKBggqhkjOPQQDAwNoADBlAjBafsTXa7S5
h49z16hyB1pdk+0uAsxCLjG99liWGt86r07PpLNn/UHv/uKdCpuTQD8CMQCPN7jj
Hz6Y2l2tmy0cFx2TPw6P/q50UMnwkuczO/WtV4Ym4vGslwWljK3ypCn1kzA=
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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YXRlIENBMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEP5xaa2Ho+bhuZ/tHU4oDctJK
V1hkCIcKNVA98WZwSkF+2U18iJDCCgCqID8yZPTeDsAwedmAnGMgoDY0LnTHU1lb
P4S/kBqlYyJS6hPLaap0OZcqm/4KlfEtzHlcQyngo2MwYTAPBgNVHRMBAf8EBTAD
AQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUhxdsTniefoHXV4y/br9bFVkt
nJgwHwYDVR0jBBgwFoAUbE8HztUJj3IR8/vZh7vPZSDVc6owCgYIKoZIzj0EAwMD
ZwAwZAIwNrIYVVOrhYieQWa0zyo6lFU2qw3PBCKjK1vs7lLRj1zL23NBcbGkO/eL
FJDJyIpFAjBhjhMsR3KPm3KJ7PdBlo2DUGndZl6IfCmDegz9GQo1IxiK2Gwlw+tx
L8FKWODvtmw=
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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K4EEACIDYgAEX0FA16XAybLR9y71HBrJiNvZoLR/3KCNPGXnUGDfeAHfcye57/eZ
n3zlBI3qX3fJYSv3FrzlFU1gqmNuLrD8Stjjm8SA//YJPC1oJIMUMgdLw7ieNvaS
lJG5eknquOjxo1MwUTAdBgNVHQ4EFgQUbE8HztUJj3IR8/vZh7vPZSDVc6owHwYD
VR0jBBgwFoAUbE8HztUJj3IR8/vZh7vPZSDVc6owDwYDVR0TAQH/BAUwAwEB/zAK
BggqhkjOPQQDAwNoADBlAjBMhiJO0hkVoz268l4Lbv4zC/joDl6fddaTjIEpXNho
rkntDlzBSsq8RbaMyKXMp80CMQDw285fiuP/3VWEwJCGP+kheIIbpF2Ek4C/7pSq
WeYdinGh4QtYefKnQ86q9/3XM3A=
-----END CERTIFICATE-----
2 changes: 1 addition & 1 deletion config/templates/policy_v2.json
View file
Open in desktop

Large diffs are not rendered by default.

2 changes: 1 addition & 1 deletion config/templates/policy_v2_signed.json
View file
Open in desktop

Large diffs are not rendered by default.

9 changes: 9 additions & 0 deletions config/templates/servtd.crl.pem
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
-----BEGIN X509 CRL-----
MIIBKzCBswIBATAKBggqhkjOPQQDAzB0MQswCQYDVQQGEwJVUzELMAkGA1UECAwC
Q0ExFDASBgNVBAcMC1NhbnRhIENsYXJhMSIwIAYDVQQKDBlNaWdURCBJbnRlcm1l
ZGlhdGUgSXNzdWVyMR4wHAYDVQQDDBVNaWdURCBJbnRlcm1lZGlhdGUgQ0EXDTI2
MDkxMjAwMDUyNVoXDTI3MDkxMjAwMDUyNVqgDjAMMAoGA1UdFAQDAgEBMAoGCCqG
SM49BAMDA2cAMGQCMFmQAz0ZXk5W+7r8rypl9h81l3N0hPx1bs3fGDFnlEalyWf6
wwVqv24QCbUpVsaGYgIwPCf2uKV65ij28VxNduI4WhKrUZTth8UUssHzUs1IasNd
5B3WwB3F8PQamlDlrzaA
-----END X509 CRL-----
2 changes: 1 addition & 1 deletion config/templates/servtd_collateral.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1 +1 @@
{"majorVersion":1,"minorVersion":0,"servtdIdentity":{"tdIdentity":{"id":"A0998F0F-B2F3-4872-8138-FBC2B853E8C6","version":1,"issueDate":"2025-01-01T00:00:00Z","nextUpdate":"2026-01-01T00:00:00Z","tcbEvaluationNumber":1,"xfam":"E71A060000000000","attributes":"0000000000000000","mrConfigId":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","mrOwner":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","mrOwnerConfig":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","mrsigner":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","isvProdId":1,"tcbLevels":[{"tcb":{"isvsvn":1},"tcbDate":"2024-01-01T00:00:00Z","tcbStatus":"UpToDate"}]},"signature":"3066023100E903D592DF599196522B27BF9AC5B6DAC650CC092E0E901B9D9DCA85595286E4D324400D022D6B5D5601C8172842D465023100D200B5F89F368BC875B6792AE553B7563E9B4DBFF15220BF04D0E06AA1E2E841A0B74CC118927D3BACB5F54B027C25AD"},"servtdIdentityIssuerChain":"-----BEGIN CERTIFICATE-----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\nQ9PpGUg1E9K9sk22W55z8vDre3VyWkj4nJl4rvk208ugBLWrezdEHasLsOc=\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----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\nMSh0m8g8dWtL\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----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\nDrAL9xNFgVm3//brLnWNpVOtcw==\n-----END CERTIFICATE-----\n","servtdTcbMapping":{"tdTcbMapping":{"id":"BB9668CA-4EE8-4523-941A-B3B03BE46E03","issueDate":"2025-01-01T00:00:00Z","isvProdId":1,"mrSigner":"00000000000000000000000000000000","nextUpdate":"2026-01-01T00:00:00Z","svnMappings":[{"isvsvn":1,"tdMeasurements":{"mrtd":"0E200328149B9BAAFD0E68557A426EFF78553D13E2536862EDDD8299A80C986567A8E03CB86F7D3EC75E99F386C3490B","rtmr0":"518923B0F955D08DA077C96AABA522B9DECEDE61C599CEA6C41889CFBEA4AE4D50529D96FE4D1AFDAFB65E7F95BF23C4","rtmr1":"C3C3F42541603E01B85F8B5BD89B45A1B386CB76D56182F63AF73589F81B3280D35545FFD3BF3BDBD5649ABD2E3C3C3E"}}],"version":1},"signature":"306502305E23F4D150336BB6CD0C873C63AB7359556DF5260689324DD242EA0F3007A7C37BFADE5C099A3859D7F9C6978A29E077023100911C7AD3F666F8CE8659F7F4F9474CF9D557AEAEA647F3B9549FF434A6589E697D0588F7E82CF87F2F794FC0E305EC51"},"servtdTcbMappingIssuerChain":"-----BEGIN CERTIFICATE-----\nMIICaDCCAe6gAwIBAgIUI42jpwfmZAB+N0e+h+6KCfklh40wCgYIKoZIzj0EAwMw\ndDELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAkNBMRQwEgYDVQQHDAtTYW50YSBDbGFy\nYTEiMCAGA1UECgwZTWlnVEQgSW50ZXJtZWRpYXRlIElzc3VlcjEeMBwGA1UEAwwV\nTWlnVEQgSW50ZXJtZWRpYXRlIENBMB4XDTI2MDcwMTEwNTA0NFoXDTI3MDcwMTEw\nNTA0NFowYzELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAkNBMRQwEgYDVQQHDAtTYW50\nYSBDbGFyYTEVMBMGA1UECgwMTWlnVEQgSXNzdWVyMRowGAYDVQQDDBFNaWdURCBJ\nbmZvIElzc3VlcjB2MBAGByqGSM49AgEGBSuBBAAiA2IABPwrt1m60ICixce/2ugR\nGSQhPzgWcbe9JYkFB49ttKJRcxluthFr1spPZerKDUwdvvGCHdoqxKT6itswbZS3\nahmVUhAsrXPDmKxDCTizZm7ceyRWZ1k7+wR3rlZTSMRoYqNSMFAwDgYDVR0PAQH/\nBAQDAgeAMB0GA1UdDgQWBBT157AdCLS2hROQ1D6welT+Ajy3TjAfBgNVHSMEGDAW\ngBRVgv61R6StRYHfVgRYfD1ejdJSgTAKBggqhkjOPQQDAwNoADBlAjASRh3kf2O1\n0EOhJiZEelug2E0+qWqN3AydrbGBn2ZJt5g5jUxhoXlcqXFPiBn83XECMQCn6Wia\nQ9PpGUg1E9K9sk22W55z8vDre3VyWkj4nJl4rvk208ugBLWrezdEHasLsOc=\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----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\nMSh0m8g8dWtL\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----\nMIICTzCCAdagAwIBAgIUYTquwcbmxr8y1BBPK5eTmYdTB1MwCgYIKoZIzj0EAwMw\nXzELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAkNBMRQwEgYDVQQHDAtTYW50YSBDbGFy\nYTEVMBMGA1UECgwMTWlnVEQgSXNzdWVyMRYwFAYDVQQDDA1NaWdURCBSb290IENB\nMB4XDTI2MDcwMTEwNTA0NFoXDTM2MDYyODEwNTA0NFowXzELMAkGA1UEBhMCVVMx\nCzAJBgNVBAgMAkNBMRQwEgYDVQQHDAtTYW50YSBDbGFyYTEVMBMGA1UECgwMTWln\nVEQgSXNzdWVyMRYwFAYDVQQDDA1NaWdURCBSb290IENBMHYwEAYHKoZIzj0CAQYF\nK4EEACIDYgAEOApWwQJHtYcFaq0EHH058knEo3Hz6kMqHiuiaB9XUttM1PGvwrux\ngnxq1SNp8tfXDQlmjXP/m1TJ+BdFX+9cqSG26/W7doazDHW1MNRir4E/v4mMzIox\n86pnu7/7oTnvo1MwUTAdBgNVHQ4EFgQUCtxBCuwlgOzy1VZm81dXlo69pNgwHwYD\nVR0jBBgwFoAUCtxBCuwlgOzy1VZm81dXlo69pNgwDwYDVR0TAQH/BAUwAwEB/zAK\nBggqhkjOPQQDAwNnADBkAjBGru+cELo1WJH/pxCN1q0adDrhJavW2yVm1A6UbZYm\nXvKKVqOsgSf/fhMRGb/htQ8CMBkFmbplQzY3SVlkTT8aBfNq3a1yNZJRw5HQUz9R\nDrAL9xNFgVm3//brLnWNpVOtcw==\n-----END CERTIFICATE-----\n"}
{"majorVersion":1,"minorVersion":0,"servtdIdentity":{"tdIdentity":{"attributes":"0000000000000000","id":"A0998F0F-B2F3-4872-8138-FBC2B853E8C6","issueDate":"2025-01-01T00:00:00Z","isvProdId":1,"mrConfigId":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","mrOwner":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","mrOwnerConfig":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","mrsigner":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","nextUpdate":"2026-01-01T00:00:00Z","tcbEvaluationNumber":1,"tcbLevels":[{"tcb":{"isvsvn":1},"tcbDate":"2024-01-01T00:00:00Z","tcbStatus":"UpToDate"}],"version":1,"xfam":"E71A060000000000"},"signature":"3065023100FD5C3636248FC0AFADEAB96FF1EA482F3AB09752C965CEF346DE0DD4B3B9E0307EEBAD671EFF283E255E69B33F134736023021B8A6A5FF6BE9468FEEFF69FAC6A00E359B53419315BAC52AE1BE9E2005EA166E924676F14504AFC95BC3D2DF895A92"},"servtdIdentityIssuerChain":"-----BEGIN CERTIFICATE-----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\nHz6Y2l2tmy0cFx2TPw6P/q50UMnwkuczO/WtV4Ym4vGslwWljK3ypCn1kzA=\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----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\nL8FKWODvtmw=\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----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\nWeYdinGh4QtYefKnQ86q9/3XM3A=\n-----END CERTIFICATE-----\n","servtdTcbMapping":{"tdTcbMapping":{"id":"BB9668CA-4EE8-4523-941A-B3B03BE46E03","issueDate":"2025-01-01T00:00:00Z","nextUpdate":"2026-01-01T00:00:00Z","svnMappings":[{"isvsvn":1,"tdMeasurements":{"tdinfo_hash":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}}],"version":1},"signature":"3066023100FC0D6C657D8B3B81BF508724124EF5E3251EB311586B88AD8FABD737A65D401FCFC557ABF0F29F190B609B3B28AB66F30231008884B1E25CE0D1652C2342AEBD7FAC12CB490AC588FB009DB2C5E12E0EB43294A0AE3DDE47284A83979A1D0275DA2C65"},"servtdCrl":"-----BEGIN X509 CRL-----\nMIIBKzCBswIBATAKBggqhkjOPQQDAzB0MQswCQYDVQQGEwJVUzELMAkGA1UECAwC\nQ0ExFDASBgNVBAcMC1NhbnRhIENsYXJhMSIwIAYDVQQKDBlNaWdURCBJbnRlcm1l\nZGlhdGUgSXNzdWVyMR4wHAYDVQQDDBVNaWdURCBJbnRlcm1lZGlhdGUgQ0EXDTI2\nMDkxMjAwMDUyNVoXDTI3MDkxMjAwMDUyNVqgDjAMMAoGA1UdFAQDAgEBMAoGCCqG\nSM49BAMDA2cAMGQCMFmQAz0ZXk5W+7r8rypl9h81l3N0hPx1bs3fGDFnlEalyWf6\nwwVqv24QCbUpVsaGYgIwPCf2uKV65ij28VxNduI4WhKrUZTth8UUssHzUs1IasNd\n5B3WwB3F8PQamlDlrzaA\n-----END X509 CRL-----\n"}
2 changes: 1 addition & 1 deletion config/templates/tcb_mapping.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1 +1 @@
{"id":"BB9668CA-4EE8-4523-941A-B3B03BE46E03","issueDate":"2025-01-01T00:00:00Z","isvProdId":1,"mrSigner":"00000000000000000000000000000000","nextUpdate":"2026-01-01T00:00:00Z","svnMappings":[{"isvsvn":1,"tdMeasurements":{"mrtd":"0E200328149B9BAAFD0E68557A426EFF78553D13E2536862EDDD8299A80C986567A8E03CB86F7D3EC75E99F386C3490B","rtmr0":"518923B0F955D08DA077C96AABA522B9DECEDE61C599CEA6C41889CFBEA4AE4D50529D96FE4D1AFDAFB65E7F95BF23C4","rtmr1":"C3C3F42541603E01B85F8B5BD89B45A1B386CB76D56182F63AF73589F81B3280D35545FFD3BF3BDBD5649ABD2E3C3C3E"}}],"version":1}
{"id":"BB9668CA-4EE8-4523-941A-B3B03BE46E03","issueDate":"2025-01-01T00:00:00Z","nextUpdate":"2026-01-01T00:00:00Z","svnMappings":[{"isvsvn":1,"tdMeasurements":{"tdinfo_hash":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}}],"version":1}
Loading
Loading