README
¶
KeyManager
KeyManager provides cryptographic key custody and protection services for Confidential Space.
Cloning and Submodules
This repository contains git submodules (including BoringSSL for KeyManager). When cloning the repository, clone recursively:
git clone --recursive https://github.com/google/go-tpm-tools.git
If you already cloned without --recursive, initialize and update all submodules before building:
git submodule update --init --recursive
Building KeyManager
Building the KeyManager Rust crates and Go modules requires CMake, Clang, Rust, and initialized git submodules:
cd keymanager
cargo build --release
Testing
To run the KeyManager Go tests:
go test ./keymanager/...
Directories
¶
| Path | Synopsis |
|---|---|
|
Package keyprotectionservice implements the Key Orchestration Layer (KOL) for the Key Protection Service.
|
Package keyprotectionservice implements the Key Orchestration Layer (KOL) for the Key Protection Service. |
|
key_custody_core
Package kpskcc implements the Key Protection Service Key Custody Core interface via Rust FFI.
|
Package kpskcc implements the Key Protection Service Key Custody Core interface via Rust FFI. |
|
km_common
|
|
|
proto
Package keymanager provides common cryptographic utilities and FFI wrappers.
|
Package keymanager provides common cryptographic utilities and FFI wrappers. |
|
Package workloadservice implements the Key Orchestration Layer (KOL) for the Workload Service Daemon (WSD).
|
Package workloadservice implements the Key Orchestration Layer (KOL) for the Workload Service Daemon (WSD). |
|
key_custody_core
Package wskcc implements the Workload Service Key Custody Core interface via Rust FFI.
|
Package wskcc implements the Workload Service Key Custody Core interface via Rust FFI. |
Click to show internal directories.
Click to hide internal directories.