Skip to main content

Crate pqrascv_verifier

Crate pqrascv_verifier 

Source
Expand description

§pqrascv-verifier

Reference verifier for the PQ-RASCV protocol.

§Verification procedure

  1. Deserialize the CBOR-encoded AttestationQuote from the prover.
  2. Re-serialize the [QuoteBody] to reproduce the exact bytes that were signed.
  3. Verify the ML-DSA-65 signature using the prover’s known verifying key.
  4. Check body.pub_key_id matches the expected key fingerprint.
  5. Apply PolicyConfig (SLSA level, age, firmware hash presence, etc.).

This crate is std-only and intended for server-side or CI use.

Structs§

PkiVerificationResult
Outcome of a successful PKI-backed attestation verification.
VerificationResult
Outcome of a successful attestation verification.
Verifier
Stateless PQ-RASCV quote verifier.