dcap-qvl 0.3.9

This crate implements the quote verification logic for DCAP (Data Center Attestation Primitives) in pure Rust.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106

"""
Tests for the Python bindings of dcap-qvl.
"""

import json
import pytest
from pathlib import Path

import dcap_qvl


class TestQuoteCollateralV3:
    """Test QuoteCollateralV3 class."""

    def test_create_collateral(self):
        """Test creating a QuoteCollateralV3 object."""
        collateral = dcap_qvl.QuoteCollateralV3(
            pck_crl_issuer_chain="test_chain",
            root_ca_crl=b"test_root_crl",
            pck_crl=b"test_pck_crl",
            tcb_info_issuer_chain="test_tcb_chain",
            tcb_info="test_tcb_info",
            tcb_info_signature=b"test_tcb_sig",
            qe_identity_issuer_chain="test_qe_chain",
            qe_identity="test_qe_identity",
            qe_identity_signature=b"test_qe_sig",
        )

        assert collateral.pck_crl_issuer_chain == "test_chain"
        assert collateral.tcb_info == "test_tcb_info"
        assert collateral.qe_identity == "test_qe_identity"

    def test_json_serialization(self):
        """Test JSON serialization and deserialization."""
        collateral = dcap_qvl.QuoteCollateralV3(
            pck_crl_issuer_chain="test_chain",
            root_ca_crl=b"test_root_crl",
            pck_crl=b"test_pck_crl",
            tcb_info_issuer_chain="test_tcb_chain",
            tcb_info="test_tcb_info",
            tcb_info_signature=b"test_tcb_sig",
            qe_identity_issuer_chain="test_qe_chain",
            qe_identity="test_qe_identity",
            qe_identity_signature=b"test_qe_sig",
        )

        # Serialize to JSON
        json_str = collateral.to_json()
        assert isinstance(json_str, str)

        # Deserialize from JSON
        collateral2 = dcap_qvl.QuoteCollateralV3.from_json(json_str)
        assert collateral2.pck_crl_issuer_chain == collateral.pck_crl_issuer_chain
        assert collateral2.tcb_info == collateral.tcb_info


class TestVerify:
    """Test quote verification functionality."""

    def test_verify_with_invalid_quote(self):
        """Test verification with invalid quote data."""
        collateral = dcap_qvl.QuoteCollateralV3(
            pck_crl_issuer_chain="test_chain",
            root_ca_crl=b"test_root_crl",
            pck_crl=b"test_pck_crl",
            tcb_info_issuer_chain="test_tcb_chain",
            tcb_info="test_tcb_info",
            tcb_info_signature=b"test_tcb_sig",
            qe_identity_issuer_chain="test_qe_chain",
            qe_identity="test_qe_identity",
            qe_identity_signature=b"test_qe_sig",
        )

        invalid_quote = b"invalid_quote_data"

        with pytest.raises(ValueError):
            dcap_qvl.verify(invalid_quote, collateral, 1234567890)


@pytest.mark.skipif(
    not Path("sample/tdx_quote").exists()
    or not Path("sample/tdx_quote_collateral.json").exists(),
    reason="Sample files not available",
)
class TestWithSampleData:
    """Test with actual sample data if available."""

    def test_verify_with_sample_data(self):
        """Test verification with sample TDX quote and collateral."""
        # Load sample quote
        with open("sample/tdx_quote", "rb") as f:
            quote_data = f.read()

        # Load sample collateral
        with open("sample/tdx_quote_collateral.json", "r") as f:
            collateral_json = json.load(f)

        collateral = dcap_qvl.QuoteCollateralV3.from_json(json.dumps(collateral_json))

        # Note: We use a timestamp that might make the test pass
        # In a real scenario, you'd use the current time or a known good time
        result = dcap_qvl.verify(quote_data, collateral, 1234567890)

        assert isinstance(result, dcap_qvl.VerifiedReport)
        assert isinstance(result.status, str)
        assert isinstance(result.advisory_ids, list)