pqrascv-hardware 1.0.0-rc.5

Hardware-rooted trust and distributed verifier consensus for PQ-RASCV
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22

//! Boot Chain Evidence
//!
//! Models the layered trust evaluation of the boot sequence, moving away
//! from opaque PCR values to explicitly named semantic trust boundaries.

use crate::digest::TypedDigest;
use crate::secure_boot::SecureBootEvidence;

/// Evidence of the explicit boot chain sequence.
#[derive(Debug, Clone, PartialEq, Eq, serde::Serialize, serde::Deserialize)]
pub struct BootChainEvidence {
    /// Trust measurement of the firmware/BIOS (typically PCR 0).
    pub firmware: TypedDigest,
    /// Trust measurement of the bootloader (typically PCR 4 / 1).
    pub bootloader: TypedDigest,
    /// Trust measurement of the OS kernel.
    pub kernel: TypedDigest,
    /// Trust measurement of the initial ramdisk (initrd/initramfs), if present.
    pub initrd: Option<TypedDigest>,
    /// Secure Boot evidence providing constraints on the bootloader/kernel signatures.
    pub secure_boot: SecureBootEvidence,
}