yawangwang

Populate the SNP/TDX Machine State field with the verified SNP/TDX attestation data + use a stable COS image version

2

This PR includes changes to populate the machinState proto with the verified SNP/TDX attestation data. The attestation verifier service will leverage the verified machineState to make claims around. # Breaking...

Add server.GRUB to verifyOpts for verify cmd cli

1

Adding `server.GRUB` to `server.verifyOpts` for verify cmd line. The intention is to align with what GAV (Google Attestation Verifier) does when doing attestation verification.

Use recommended crypto library to create ECC seed

2

Per discussions from https://github.com/google/go-tpm-tools/pull/471#discussion_r1725944593, remove curve P224 as it is not supported by crypto/ecdh