google/go-attestation
View on GitHub ↗ ★ 452 Go
Libraries to abstract aspects of working with TPMs for the purposes of attestation
4 mentions on Hacker News by 1 person: 0 stories, 4 comments · first 2020-09-24 · latest 2026-09-07
20082026
-
…mechanism to do that in advance then that's easy enough, but otherwise you'd want something like https://github.com/google/go-attestation and then to use control plane APIs to identify the vTPM EK to tie the TPM to the VM.
comment by mjg59 · 2026-09-07 · in Signing TLS handshakes inside a TPM -
…sense, but with GCP you can retrieve the EKpub of a VM's TPM via the control plane, and then use https://github.com/google/go-attestation to verify that an application key is associated with that TPM and hence that VM
comment by mjg59 · 2023-03-27 · in We need better support for SSH host certificates -
https://github.com/google/go-attestation is a free implementation of remote attestation that's not associated with any CPU type and will work on anything that has a TPM. But what we want here isn't really remote attestation (which implies…
comment by mjg59 · 2022-04-05 · in Bearer tokens are just awful -
(additional plug) portions of which are used to enable github.com/google/go-attestation, which aims to make it practical for verification of system boot state in a heterogeneous environment and is now being actively used inside Google.
comment by mjg59 · 2020-09-24 · in NSA Technical Report on UEFI Secure Boot Customization [pdf]