Crate ccatoken

source ·
Expand description

Arm CCA attestation token verification and appraisal.

This crate provides an API to decode, verify and appraise attestation evidence produced by an Armv9-A CCA platform. For detailed information about the format, see §A.7 of the Realm Management Monitor RMM specification.

The API allows:

  • Decoding a CBOR-encoded CCA attestation token
  • Cryptographically verifying the integrity and authenticity of the token
  • Appraising the contents of the token against user-supplied reference values

Modules§

  • The store module provides traits and concrete types to implement the interfaces between:
  • The token module provides an Evidence object to encapsulate business logics and associated state used for verification and appraisal of a CCA attestation token.