Expand description
§pqrascv-verifier
Reference verifier for the PQ-RASCV protocol.
§Verification procedure
- Deserialize the CBOR-encoded
AttestationQuotefrom the prover. - Re-serialize the [
QuoteBody] to reproduce the exact bytes that were signed. - Verify the ML-DSA-65 signature using the prover’s known verifying key.
- Check
body.pub_key_idmatches the expected key fingerprint. - Apply
PolicyConfig(SLSA level, age, firmware hash presence, etc.).
This crate is std-only and intended for server-side or CI use.
Structs§
- PkiVerification
Result - Outcome of a successful PKI-backed attestation verification.
- Verification
Result - Outcome of a successful attestation verification.
- Verifier
- Stateless PQ-RASCV quote verifier.