rust-keylime icon indicating copy to clipboard operation
rust-keylime copied to clipboard

add support for CMW evidence format - agent side

Open HarshvMahawar opened this issue 5 months ago • 2 comments

Server side - https://github.com/keylime/keylime/pull/1777

Concise Summary

Support CMW-based evidence serving instead of custom quote format

This PR adds initial support for sending attestation evidence encoded using the Conceptual Message Wrapper (CMW), as prescribed by the IETF draft. It introduces encoding logic and also introduced an api-version v2.4 (subject to approval) to serve the CMW

e.g.

curl -vk --cert /var/lib/keylime/cv_ca/client-cert.crt --key /var/lib/keylime/cv_ca/client-private.pem "https://localhost:9002/v2.4/quotes/integrity?nonce=1234567890ABCDEF&mask=0x10401&partial=0" | jq

HarshvMahawar avatar Jul 15 '25 05:07 HarshvMahawar

Codecov Report

:x: Patch coverage is 84.77509% with 44 lines in your changes missing coverage. Please review. :white_check_mark: Project coverage is 58.41%. Comparing base (d7003ab) to head (f13aceb).

Files with missing lines Patch % Lines
keylime/src/cmw.rs 82.20% 42 Missing :warning:
keylime-agent/src/quotes_handler.rs 96.07% 2 Missing :warning:
Additional details and impacted files
Flag Coverage Δ
e2e-testsuite 58.41% <84.77%> (-0.49%) :arrow_down:
upstream-unit-tests 58.41% <84.77%> (-0.49%) :arrow_down:

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines Coverage Δ
keylime-agent/src/api.rs 81.01% <100.00%> (+0.49%) :arrow_up:
keylime/src/config/base.rs 87.08% <ø> (ø)
keylime-agent/src/quotes_handler.rs 68.50% <96.07%> (+6.92%) :arrow_up:
keylime/src/cmw.rs 82.20% <82.20%> (ø)

... and 11 files with indirect coverage changes

:rocket: New features to boost your workflow:
  • :snowflake: Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

codecov[bot] avatar Jul 15 '25 09:07 codecov[bot]

@HarshvMahawar make sure that all the test pass.

@ansasaki can you have a look?

THS-on avatar Jul 27 '25 15:07 THS-on