Ernesto J Ocampo

Check if the signed payload is either: - Always over the 4 fields `body`, `integratedTime`, `logID`, and `logIndex` as suggested by Rekor [here](https://github.com/sigstore/rekor/blob/70d6663e297068383f708155f4017110c6f46713/openapi.yaml#L483C23-L483C23) . This is what we're currently doing....

Move building of proto generated files to its own crate.

7

I'm moving the generating Rust code for our protos into its own `proto` crate (#4565) . [EDIT 4 Jan 2024: two different crates, see comments] `oak_attestation_verification` provides conversion from its...

Remove serde_jcs dependency

2

And make Rekor signature verification more robust. #4616 WIP WIP WIP - feedback wanted: For the purpose of verifying the Rekor LogEntry `signedEntryTimestap` field, we don't really care about the...

Better docs on how to verify signedEntryTimestamp

10

In order to verify `signedEntryTimestamp`, one needs to follow instructions that I could only find [here in this yaml](https://github.com/sigstore/rekor/blob/4fcdcaa58fd5263560a82978d781eb64f5c5f93c/openapi.yaml#L467-L471). That's also the only specification I could find as to what's...

Revert "Add micro_rpc method_id option to service protos."

1

Reverts project-oak/oak#4948

When we pull curve-25519 v4.1.2, we get `stdarch_x86_avx512 flag not found`. For now, pinning to 4.1.1.

Cannot build a no_std crate that uses a proc macro that uses std

1

Given: - A crates index where all crates are no_std compatible - A crate we want to build for bare metal which uses a proc macro that depends on some...