Skip to content

2026.10.02

Latest
Latest

Choose a tag to compare

View all tags
@sgilson sgilson released this 07 Oct 15:33
2026.10.02
11b2bfe
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

New features

Support for new GPU Opaque Data Format

  • NVIDIA GPU Drivers released with CUDA 13.5 and onward will use an opaque data format that is not backwards compatible. This verifier release prepares the attestation SDK for the new format.
  • The evidence format and verifier version requirements are described in NVIDIA Opaque Data Format.
  • This release still supports drivers from CUDA releases prior to 13.5.

Experimental CoRIM verifier

This release introduces an experimental CoRIM verifier that evaluates CMW evidence against CoRIM reference manifests and produces an Entity Attestation Result (EAR). It includes:

  • Support for a subset of IETF CoRIM draft-11.
  • collect-evidence-v2 and attest-v2 CLI commands, C APIs, and Rust bindings for local appraisal.
  • NVML, corelib, and recorded SPDM transcript evidence sources in collect-evidence-v2, plus signed EAT/CWT evidence input in attest-v2.
  • Signed EAR output and authentication through the C API and CLI, plus relying-party policy evaluation.
  • Evidence-profile information in EAR submodules when it is available from the source evidence.
  • In-memory LRU/TTL caching for CoRIM documents and OCSP responses.
  • RIM-locator URL allowlists and rewrite rules for controlled CoRIM retrieval.
  • Evidence collection for Rubin GPUs via NVML when in CC mode.

Relying-party verification

  • Adds public C, Rust, and CLI interfaces for verifying NRAS-issued detached EATs and optionally applying relying-party policy.
  • Adds configurable JWT time-claim leeway, with a 60-second default, to tolerate normal issuer/verifier clock differences.

Enhancements

Core reliability, security, and diagnostics

  • HTTP requests now carry a unique x-request-id; retry and error logs include it to help correlate client and service-side failures.
  • Retry diagnostics now report jittered backoff, retryable and non-retryable failures, rate limiting, and the final request outcome.
  • HTTP failures now include detailed libcurl TLS and socket diagnostics when available.
  • Fixes service-key Authorization-header delivery for eligible requests, while restricting service-key transmission to HTTPS nvidia.com hosts and subdomains.
  • Adds distinct errors for empty evidence and malformed evidence rather than reporting generic internal failures.
  • Fixes a C API memory leak on failed attestation calls involving detached EAT output and caller-supplied nonces.

Certificate and deployment configuration

  • Adds configurable TLS CA bundle and CA-directory settings for deployments with private trust stores.
  • Adds OCSP responder discovery from certificate AIA extensions, controlled URL rewrites, and selectable OCSP CertID hash algorithms (SHA-1, SHA-256, or SHA-384; SHA-256 by default).

Rust SDK

  • Local GPU and NVSwitch verifiers, RIM stores, OCSP clients, and evidence policies are now safe to share across threads, allowing a service to share one verifier and its caches across a worker pool.
  • Adds DetachedEatOptions so callers can sign detached EATs with a caller-supplied P-384 key, issuer, and key ID.
  • Adds safe Rust bindings for cached RIM stores, cached OCSP clients, EAT verification, JWT validation options, and CoRIM local appraisal.
  • Rust verification and attestation calls now return the signed token, claims, result code, and message for negative verdicts or relying-party policy mismatches, so applications can inspect the result.

Platform support

  • Adds Ubuntu 26.04 support.

Components

  • nvattest 2.0.0
  • libnvat and libnvat-dev 2.0.0
  • nv-attestation-sdk-rust 2.0.0

See the Downloads page for installation instructions.

Assets 2
Loading