Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
49 changes: 37 additions & 12 deletions repo-guide.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,9 @@ This is the main repo holding the code implementing the attestation verification
[docs](https://github.com/veraison/docs)
Veraison documentation

[book](https://github.com/veraison/book)
Compilation of documentation for various Veraison projects into a reader-friendly format

## Project
[community](https://github.com/veraison/community)
Veraison community files. Look here for introductory presentations to the project and CCC membership materials.
Expand All @@ -35,12 +38,19 @@ This collection of libraries provides manipulation and verification functionalit
[ccatoken](https://github.com/veraison/ccatoken)
A library for the Arm Confidential Computing Architecture (CCA) Attestation Token.

[rust-ccatoken](https://github.com/veraison/rust-ccatoken)
Rust implementation of the Arm Confidential Computing Architecture (CCA) Attestation Token library.

[dice](https://github.com/veraison/dice): library providing support functions for manipulating various profiles of DICE.

[parsec](https://github.com/veraison/parsec): Library support for handling the Parsec Key Attestation formats used in the attested TLS PoC.

## Demos and Integration Examples

[enact-demo](https://github.com/veraison/enact-demo): EnactTrust TPM/Veraison interop demo and related docs

[keybroker-demo](https://github.com/veraison/keybroker-demo): A simple key broker protocol demonstration


## CLI tools
CLI tools for illustrative interactions with attestation tokens or a Veraison service. Used for demos & integration testing.
Expand All @@ -54,6 +64,12 @@ CLI for Veraison services policy management client
[gen-corim](https://github.com/veraison/gen-corim)
CLI for generating CoRIM (containing Endorsements and Reference Values) using Evidence

[gen-testcase](https://github.com/veraison/gen-testcase)
Test case generator for CoRIM-related testing and validation

[cca-realm-measurements](https://github.com/veraison/cca-realm-measurements)
A tool to calculate Realm Initial Measurements and Realm Extended Measurements for Arm CCA

## Standards driven work
The Veraison Project supports Attestation related working groups in standards bodies, in particular IETF & TCG. This set of repos provide test bed implementations for some of the standards work, as related to Veraison services.

Expand All @@ -66,15 +82,22 @@ These libraries provide functions for working with EAR (EAT Attestation Results)

[ear](https://github.com/veraison/ear): Golang implementation of EAT Attestation Results
[rust-ear](https://github.com/veraison/rust-ear): Rust implementation of EAT Attestation Results
[c-ear](https://github.com/veraison/ear): C implementation of EAT Attestation Results
[c-ear](https://github.com/veraison/c-ear): C implementation of EAT Attestation Results
[python-ear](https://github.com/veraison/python-ear): Python implementation of EAT Attestation Results

[cmw](https://github.com/veraison/cmw): implementation for RATS WG Conceptual Message Wrappers (draft-ftbs-rats-msg-wrap) for attestation related data encapsulation.

[rust-cmw](https://github.com/veraison/rust-cmw): Rust implementation of RATS WG Conceptual Message Wrappers

[ratsd](https://github.com/veraison/ratsd): A RATS conceptual message collection daemon

#### Verifier Provisioning
These libraries provide support for the standard information models used to convey data to a Verifier.

[corim](https://github.com/veraison/corim): manipulation of Concise Reference Integrity Manifest (CoRIM) and Concise Module Identifier (CoMID) tags. Also includes cocli CLI tool, that assists users creating CoRIM & CoMID tags.

[corim-rs](https://github.com/veraison/corim-rs): Rust implementation of CoRIM and CoMID manipulation library

[swid](https://github.com/veraison/swid) : SWID and CoSWID manipulation library

#### COSE
Expand All @@ -101,12 +124,10 @@ flowchart TD
subgraph Veraison["<b>Core Structure </b?"]
style Veraison stroke:#333,stroke-width:4px

SP("Supply Chain \n
\n")
SP("Supply Chain")
style SP fill:#f9f,stroke:#333,stroke-width:4px

ATT("Attester \n
\n")
ATT("Attester")
style ATT fill:#f9f,stroke:#333,stroke-width:4px

COCLI["<b>Endorsement Manipulation CLI Tool</b>
Expand All @@ -117,6 +138,7 @@ GEN-CORIM["<b>Endorsement creation from Evidence CLI Tool</b>

VPF["<b>Verifier Provisioning Formats</b>
<i>corim</i>
<i>corim-rs</i>
<i>coswid</i>"]
COCLI ---> VPF

Expand All @@ -130,22 +152,25 @@ EF["<b>Evidence Formats</b>
<i>eat</i>
<i>psatoken</i>
<i>ccatoken</i>
<i>rust-ccatoken</i>
<i>enacttrust-tpm</i>
<i>parsec (tpm, cca)</i>"]
EF ---> CL

SD["<b>Core Verifier repositories</b>
<i>services</i>
<i>docs</i>"]
<i>docs</i>
<i>book</i>
<i>ratsd</i>"]

RP("Relying Party \n
\n")
RP("Relying Party")
style RP fill:#f9f,stroke:#333,stroke-width:4px

AR["<b>Attestation Results</b>
<i>ear</i>
<i>c-ear</i>
<i>rust-ear</i>"]
<i>rust-ear</i>
<i>python-ear</i>"]
RP ---> AR

subgraph Verifier["Verifier"]
Expand Down Expand Up @@ -173,7 +198,8 @@ EVCLI["<b>Evidence Manipulation CLI Tool</b> \n <i>evcli</i> "]
EVCLI ---> API

CMW["<b>CONCEPTUAL MESSAGE WRAPPER</b>
<i>cmw</i>"]
<i>cmw</i>
<i>rust-cmw</i>"]

ATT --->EF
ATT -.-> EVCLI
Expand All @@ -183,8 +209,7 @@ Verifier ---> CMW
POCLI["<b>Policy Mgmt CLI Tool</b>
<i>pocli</i>"]

VO("Verifier Owner \n
\n")
VO("Verifier Owner")
style VO fill:#f9f,stroke:#333,stroke-width:4px

VO --> POCLI
Expand Down