Module blind_llama.verify

Functions

def check_event_log(input_event_log, pcr_end, initial_pcr='0000000000000000000000000000000000000000000000000000000000000000')
def check_quote(quote, pub_key_pem)

Check quote using tpm2_checkquote command.

Parameters

quote: dictionary with keys 'message', 'signature', and 'pcr' pub_key_pem: public key in PEM format (string) Returns: Raises:

def check_server_cert(received_cert, pcr_end, initial_pcr='0000000000000000000000000000000000000000000000000000000000000000')
def decode_b64_encoding(x)
def test_check_pass()
def verify_ak_cert(cert_chain: list[bytes]) ‑> bytes

Verify the certificate chain of the attestation key.

Parameters

cert_chain: list of certificates in DER format

Returns

AK certificate in DER format

Raises

AttestationError
if the certificate chain is invalid

Classes

class AttestationError (*args, **kwargs)

This exception is raised when the attestation is invalid (enclave settings mismatching, debug mode unallowed…).

Used as base exception for all other sub exceptions on the attestation validation

Ancestors

  • builtins.Exception
  • builtins.BaseException