Modules§

Structs§

  • A Challenge from the server used to guarantee freshness of attestations
  • ConfidentialSpaceInfo contains information related to the Confidential Space TEE.
  • ContainerImageSignature holds necessary metadata to verify a container image signature.
  • Message for creating a Challenge
  • Credentials issued by GCP which are linked to the platform attestation. These will be verified server-side as part of attestaion verification.
  • SignedEntity represents an OCI image object containing everything necessary to verify container image signatures.
  • Options to modify claims in the token to generate custom-purpose tokens.
  • TPM2 data containing everything necessary to validate any platform state measured into the TPM.
  • A request for an OIDC token, providing all the necessary information needed for this service to verify the plaform state of the requestor.
  • A response once an attestation has been successfully verified, containing a signed OIDC token.

Enums§

  • SigningAlgorithm enumerates all the supported signing algorithms.
  • Token type enum contains the different types of token responses Confidential Space supports