dcap-qvl 0.6.1

This crate implements the quote verification logic for DCAP (Data Center Attestation Primitives) in pure Rust.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132

"""
DCAP Quote Verification Library

This package provides Python bindings for the DCAP (Data Center Attestation Primitives)
quote verification library implemented in Rust.

Claims API (matches Rust):
1. verify(quote, collateral, now_secs) -> VerifiedReport
2. QuoteVerifier.verify_with_policy(...) -> QuoteClaims

Main classes:
- QuoteCollateralV3: Represents quote collateral data
- VerifiedReport: Legacy one-shot verification result
- QuotePolicy: Verification policy with builder pattern
- QuoteClaims: Detailed serializable claims for downstream policy engines

Main functions:
- verify: Verify a quote with collateral data (returns VerifiedReport)
- get_collateral: Get collateral from PCCS URL
- get_collateral_from_pcs: Get collateral from Intel PCS
- get_collateral_and_verify: Get collateral and verify quote
"""

import time
from importlib.metadata import version
from typing import Optional

from ._dcap_qvl import (
    PyQuoteCollateralV3 as QuoteCollateralV3,
    PyVerifiedReport as VerifiedReport,
    PyQuoteClaims as QuoteClaims,
    PyQuoteHeader as QuoteHeader,
    PyTdReport10 as TdReport10,
    PyTdReport15 as TdReport15,
    PySgxEnclaveReport as SgxEnclaveReport,
    PyPckExtension as PckExtension,
    PyQuotePolicy as QuotePolicy,
    PyQuoteVerifier as QuoteVerifier,
    PyQuote as Quote,
    py_verify as verify,
    py_verify_with_root_ca as verify_with_root_ca,
    parse_quote,
    parse_pck_extension_from_pem,
    get_collateral,
)

from .enums import AttestationKeyType, TeeType

# Default PCCS URL (Phala Network's PCCS server - recommended)
PHALA_PCCS_URL = "https://pccs.phala.network"

# Intel's official PCS URL
INTEL_PCS_URL = "https://api.trustedservices.intel.com"

# Backward compatibility alias
PCS_URL = INTEL_PCS_URL


async def get_collateral_from_pcs(raw_quote: bytes) -> QuoteCollateralV3:
    """Get collateral from Intel PCS.

    Use this function to explicitly fetch collateral from Intel's
    Provisioning Certification Service. For most use cases,
    use get_collateral() with PHALA_PCCS_URL instead.

    Args:
        raw_quote: Raw quote bytes

    Returns:
        QuoteCollateralV3: Quote collateral data

    Raises:
        ValueError: If quote is invalid or FMSPC cannot be extracted
        RuntimeError: If network request fails
    """
    return await get_collateral(INTEL_PCS_URL, raw_quote)


async def get_collateral_and_verify(
    raw_quote: bytes,
    pccs_url: Optional[str] = None,
) -> VerifiedReport:
    """Get collateral and verify the quote, returning a verified report.

    Args:
        raw_quote: Raw quote bytes
        pccs_url: Optional PCCS URL (defaults to Phala PCCS)

    Returns:
        VerifiedReport: Legacy verified report

    Raises:
        ValueError: If quote is invalid or verification fails
        RuntimeError: If network request fails
    """
    url = (pccs_url or "").strip() or PHALA_PCCS_URL

    # Get collateral
    collateral = await get_collateral(url, raw_quote)

    # Verify quote
    now_secs = int(time.time())
    return verify(raw_quote, collateral, now_secs)


__all__ = [
    "QuoteCollateralV3",
    "QuoteClaims",
    "QuoteVerifier",
    "VerifiedReport",
    "QuoteHeader",
    "TdReport10",
    "TdReport15",
    "SgxEnclaveReport",
    "PckExtension",
    "QuotePolicy",
    "AttestationKeyType",
    "TeeType",
    "Quote",
    "verify",
    "verify_with_root_ca",
    "get_collateral",
    "get_collateral_from_pcs",
    "get_collateral_and_verify",
    "parse_quote",
    "parse_pck_extension_from_pem",
    "PHALA_PCCS_URL",
    "INTEL_PCS_URL",
    "PCS_URL",
]

__version__ = version("dcap-qvl")