proofs

func GetBootProofTime ¶

func GetBootProofTime(bootProof *models.BootProof) (time.Time, error)

GetBootProofTime extracts the timestamp from a boot proof

func Verify ¶

func Verify(appProof *models.AppProof, bootProof *models.BootProof) error

Verify an app proof and boot proof pair.

This establishes a cryptographic chain of trust:

1. Verifies the app proof signature
2. Verifies the boot proof a. Verifies the AWS Nitro attestation document signature and validity b. Verifies the QOS manifest hash matches the attestation document user_data
3. Verifies the app proof / boot proof connection - that the app proof's ephemeral public key matches attestation document's public_key field

To learn more about verifying app proofs and boot proofs, see: https://whitepaper.turnkey.com/foundations/

func VerifyAppProofSignature ¶

func VerifyAppProofSignature(appProof *models.AppProof) error

VerifyAppProofSignature verifies the app proof's P-256 ECDSA signature