1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97

#[macro_use]
extern crate nom;

use nom::{error::ErrorKind, Err};

mod parsers;

#[derive(Debug, Clone, PartialEq)]
pub struct Quote<'a> {
    pub header: Header<'a>,
    pub isv_report: ReportBody<'a>,
    pub signature: Signature<'a>,
    signed_message: &'a [u8],
}

/// An Intel SGX Version 3 quote, as specified in
//// https://download.01.org/intel-sgx/dcap-1.1/linux/docs/Intel_SGX_ECDSA_QuoteGenReference_DCAP_API_Linux_1.1.pdf.
impl<'a> Quote<'a> {
    pub fn parse(quote_bytes: &'a [u8]) -> Result<Self, Err<(&'a [u8], ErrorKind)>> {
        crate::parsers::parse_quote(quote_bytes).map(|qp| qp.1)
    }

    /// Returns the part of the quote that's signed by the AK (i.e. *header* || *isv_report*).
    pub fn signed_message(&self) -> &[u8] {
        &self.signed_message
    }
}

#[derive(Debug, Clone, PartialEq)]
pub struct Header<'a> {
    pub version: u16,
    pub qe_svn: u16,
    pub pce_svn: u16,
    pub qe_vendor_id: &'a [u8],
    pub user_data: &'a [u8],
}

#[derive(Debug, Clone, PartialEq)]
pub enum Signature<'a> {
    EcdsaP256 {
        isv_report_signature: &'a [u8],
        attestation_key: &'a [u8],
        qe_report: ReportBody<'a>,
        qe_report_signature: &'a [u8],
        qe_authentication_data: &'a [u8],
        qe_certification_data: QeCertificationData<'a>,
    },
}

#[derive(Debug, Clone, PartialEq)]
pub struct ReportBody<'a> {
    pub cpu_svn: &'a [u8],
    pub miscselect: u32,
    pub attributes: &'a [u8],
    pub mrenclave: &'a [u8],
    pub mrsigner: &'a [u8],
    pub isv_prod_id: u16,
    pub isv_svn: u16,
    pub report_data: &'a [u8],
    signed_message: &'a [u8],
}

impl<'a> ReportBody<'a> {
    pub fn signed_message(&self) -> &[u8] {
        &self.signed_message
    }
}

#[derive(Debug, Clone, PartialEq)]
pub enum QeCertificationData<'a> {
    Ppid {
        ppid: Ppid<'a>,
        cpu_svn: &'a [u8],
        pce_svn: u16,
        pce_id: u16,
    },
    CertChain(&'a [u8]),
}

#[derive(Debug, Clone, PartialEq)]
pub enum Ppid<'a> {
    Clear(&'a [u8]),
    Enc2048(&'a [u8]),
    Enc3072(&'a [u8]),
}

#[cfg(test)]
mod tests {
    use super::*;

    static V2_QUOTE: &[u8] = include_bytes!("../fixtures/v2_quote.bin");

    #[test]
    fn test_parse_v2_quote() {
        assert!(Quote::parse(V2_QUOTE).is_ok());
    }
}