ExternalVendorCode/go-attestation
1
0
Fork 0
mirror of https://github.com/google/go-attestation.git synced 2025-06-24 09:11:54 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
339 Commits 3 Branches 15 Tags
master
Commit Graph

339 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Krishap
e2cec1e0b5 Add support for AMD EK certificates (#380)
Some checks failed
CodeQL / Analyze (go) (push) Has been cancelled
Details
Test / test-linux (1.24.x) (push) Has been cancelled
Details
Test / test-linux-tpm12 (1.24.x) (push) Has been cancelled
Details
Test / test-macos (1.24.x) (push) Has been cancelled
Details
Test / test-windows (1.24.x) (push) Has been cancelled
Details 
* Add support for AMD EK certificates

* Add ekCertURL helper function
 2025-06-20 11:13:29 +10:00
Limansa
119ce6dd2f Support ECDSA verification for attribute certificates (#429)
Some checks failed
CodeQL / Analyze (go) (push) Has been cancelled
Details
Test / test-linux (1.24.x) (push) Has been cancelled
Details
Test / test-linux-tpm12 (1.24.x) (push) Has been cancelled
Details
Test / test-macos (1.24.x) (push) Has been cancelled
Details
Test / test-windows (1.24.x) (push) Has been cancelled
Details
2025-06-19 13:08:23 +10:00
Sriharsha B S
5a7c6f70d0 As per RFC 5755, OtherObjectTypeID is optional (#427)
Some checks failed
CodeQL / Analyze (go) (push) Has been cancelled
Details
Test / test-linux (1.24.x) (push) Has been cancelled
Details
Test / test-linux-tpm12 (1.24.x) (push) Has been cancelled
Details
Test / test-macos (1.24.x) (push) Has been cancelled
Details
Test / test-windows (1.24.x) (push) Has been cancelled
Details 
This PR makes this field optional

```
RFC 5755              AC Profile for Authorization          January 2010


        ObjectDigestInfo ::= SEQUENCE {
          digestedObjectType  ENUMERATED {
            publicKey            (0),
            publicKeyCert        (1),
            otherObjectTypes     (2) },
          -- otherObjectTypes MUST NOT
          -- be used in this profile
          otherObjectTypeID   OBJECT IDENTIFIER OPTIONAL,
          digestAlgorithm     AlgorithmIdentifier,
          objectDigest        BIT STRING
        }
```

Co-authored-by: Liam Murphy <liamjm@google.com>
 2025-05-30 16:30:59 +10:00
Jason Lin
fa3c5c67b2 Make ActivationParameters.CheckAKParameters() public (#421)
Some checks failed
CodeQL / Analyze (go) (push) Has been cancelled
Details
Test / test-linux (1.24.x) (push) Has been cancelled
Details
Test / test-linux-tpm12 (1.24.x) (push) Has been cancelled
Details
Test / test-macos (1.24.x) (push) Has been cancelled
Details
Test / test-windows (1.24.x) (push) Has been cancelled
Details 
This allows the user to check the AK parameter even if it does not need to
generate the encrypted credential.
 2025-05-28 08:08:48 -07:00
Jason Lin
9d39fe9d33 x509ext.ParseSubjectAltName() rejects unknown otherName type ids (#419)
Some checks failed
CodeQL / Analyze (go) (push) Has been cancelled
Details
Test / test-linux (1.24.x) (push) Has been cancelled
Details
Test / test-linux-tpm12 (1.24.x) (push) Has been cancelled
Details
Test / test-macos (1.24.x) (push) Has been cancelled
Details
Test / test-windows (1.24.x) (push) Has been cancelled
Details 
It currently already reject SAN with unknown tags. It should be strict and also
reject unknown otherName type ids.
 2025-05-28 01:05:49 +00:00
Jason Lin
aacd99179c Add oid.VerifiedTPM{Fixed,Residency} (#420) 
We already have VerifiedTPMRestricted from Section 8.2 of [1]. Also add the
the other two OIDs there. Go-attestation itself might not use it, but the user
of it might need it (e.g. to add a VerifiedTPMResidency policy to an AK cert)

[1] https://trustedcomputinggroup.org/wp-content/uploads/TPM-2p0-Keys-for-Device-Identity-and-Attestation_v1_r12_pub10082021.pdf
 2025-05-27 18:03:12 -07:00
dependabot[bot]
710ff5b9ae Bump golangci/golangci-lint-action in the github-actions group (#422)
Some checks failed
CodeQL / Analyze (go) (push) Has been cancelled
Details
Test / test-linux (1.24.x) (push) Has been cancelled
Details
Test / test-linux-tpm12 (1.24.x) (push) Has been cancelled
Details
Test / test-macos (1.24.x) (push) Has been cancelled
Details
Test / test-windows (1.24.x) (push) Has been cancelled
Details 
Bumps the github-actions group with 1 update: [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action).

Updates `golangci/golangci-lint-action` from 7 to 8
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v7...v8)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-05-19 11:15:39 -07:00
Liam Murphy
3e297cd27c Update tpm.go docs to match relative for AttestPlatform (#426)
Some checks failed
CodeQL / Analyze (go) (push) Has been cancelled
Details
Test / test-linux (1.24.x) (push) Has been cancelled
Details
Test / test-linux-tpm12 (1.24.x) (push) Has been cancelled
Details
Test / test-macos (1.24.x) (push) Has been cancelled
Details
Test / test-windows (1.24.x) (push) Has been cancelled
Details 
#404 Added support for discovery of supported PCR banks, but the method comment for AttestPlatform still references a using static list of SHA1 and SHA256 PCRs.
 2025-05-14 17:14:49 +00:00
dependabot[bot]
8cf7d46d70 Bump github.com/google/go-tpm in the go-modules group (#425)
Some checks failed
CodeQL / Analyze (go) (push) Has been cancelled
Details
Test / test-linux (1.24.x) (push) Has been cancelled
Details
Test / test-linux-tpm12 (1.24.x) (push) Has been cancelled
Details
Test / test-macos (1.24.x) (push) Has been cancelled
Details
Test / test-windows (1.24.x) (push) Has been cancelled
Details 
Bumps the go-modules group with 1 update: [github.com/google/go-tpm](https://github.com/google/go-tpm).


Updates `github.com/google/go-tpm` from 0.9.4 to 0.9.5
- [Release notes](https://github.com/google/go-tpm/releases)
- [Commits](https://github.com/google/go-tpm/compare/v0.9.4...v0.9.5)

---
updated-dependencies:
- dependency-name: github.com/google/go-tpm
  dependency-version: 0.9.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-05-12 16:15:41 -07:00
dependabot[bot]
d2175e24a2 Bump the go-modules group with 2 updates (#423)
Some checks failed
CodeQL / Analyze (go) (push) Has been cancelled
Details
Test / test-linux (1.24.x) (push) Has been cancelled
Details
Test / test-linux-tpm12 (1.24.x) (push) Has been cancelled
Details
Test / test-macos (1.24.x) (push) Has been cancelled
Details
Test / test-windows (1.24.x) (push) Has been cancelled
Details
2025-05-05 08:55:03 -07:00
dependabot[bot]
72f8296172 Bump golang.org/x/crypto from 0.31.0 to 0.35.0 in the go_modules group (#418)
Some checks failed
CodeQL / Analyze (go) (push) Has been cancelled
Details
Test / test-linux (1.24.x) (push) Has been cancelled
Details
Test / test-linux-tpm12 (1.24.x) (push) Has been cancelled
Details
Test / test-macos (1.24.x) (push) Has been cancelled
Details
Test / test-windows (1.24.x) (push) Has been cancelled
Details 
Bumps the go_modules group with 1 update: [golang.org/x/crypto](https://github.com/golang/crypto).


Updates `golang.org/x/crypto` from 0.31.0 to 0.35.0
- [Commits](https://github.com/golang/crypto/compare/v0.31.0...v0.35.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.35.0
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-04-14 13:53:09 -07:00
dependabot[bot]
e03faf05a1 Bump golang.org/x/sys from 0.31.0 to 0.32.0 in the go-modules group (#417)
Some checks failed
CodeQL / Analyze (go) (push) Has been cancelled
Details
Test / test-linux (1.24.x) (push) Has been cancelled
Details
Test / test-linux-tpm12 (1.24.x) (push) Has been cancelled
Details
Test / test-macos (1.24.x) (push) Has been cancelled
Details
Test / test-windows (1.24.x) (push) Has been cancelled
Details 
Bumps the go-modules group with 1 update: [golang.org/x/sys](https://github.com/golang/sys).


Updates `golang.org/x/sys` from 0.31.0 to 0.32.0
- [Commits](https://github.com/golang/sys/compare/v0.31.0...v0.32.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-04-07 09:30:38 -07:00
dependabot[bot]
50b610bb61 Bump golangci/golangci-lint-action in the github-actions group (#416)
Some checks failed
CodeQL / Analyze (go) (push) Has been cancelled
Details
Test / test-linux (1.24.x) (push) Has been cancelled
Details
Test / test-linux-tpm12 (1.24.x) (push) Has been cancelled
Details
Test / test-macos (1.24.x) (push) Has been cancelled
Details
Test / test-windows (1.24.x) (push) Has been cancelled
Details 
Bumps the github-actions group with 1 update: [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action).

Updates `golangci/golangci-lint-action` from 6 to 7
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v6...v7)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-03-31 11:29:39 -07:00
Nithin Sade
ae4b8b8d16 Support ECDSA based AK's on Windows (#415)
Some checks failed
CodeQL / Analyze (go) (push) Has been cancelled
Details
Test / test-linux (1.24.x) (push) Has been cancelled
Details
Test / test-linux-tpm12 (1.24.x) (push) Has been cancelled
Details
Test / test-macos (1.24.x) (push) Has been cancelled
Details
Test / test-windows (1.24.x) (push) Has been cancelled
Details
2025-03-27 10:15:13 -07:00
Brandon Weeks
c5d6b1e758 Fix CodeSQL permissions take 2 (#413)
Some checks failed
CodeQL / Analyze (go) (push) Has been cancelled
Details
Test / test-linux (1.24.x) (push) Has been cancelled
Details
Test / test-linux-tpm12 (1.24.x) (push) Has been cancelled
Details
Test / test-macos (1.24.x) (push) Has been cancelled
Details
Test / test-windows (1.24.x) (push) Has been cancelled
Details
2025-03-05 20:25:46 +00:00
Brandon Weeks
7d4525c388 Fix CodeSQL permissions (#412) 2025-03-05 12:06:09 -08:00
dependabot[bot]
dce70c6163 Bump the go-modules group with 3 updates (#410) 
Bumps the go-modules group with 3 updates: [github.com/google/go-cmp](https://github.com/google/go-cmp), [github.com/google/go-tpm-tools](https://github.com/google/go-tpm-tools) and [golang.org/x/sys](https://github.com/golang/sys).

Updates `github.com/google/go-cmp` from 0.6.0 to 0.7.0
- [Release notes](https://github.com/google/go-cmp/releases)
- [Commits](https://github.com/google/go-cmp/compare/v0.6.0...v0.7.0)

Updates `github.com/google/go-tpm-tools` from 0.4.4 to 0.4.5
- [Release notes](https://github.com/google/go-tpm-tools/releases)
- [Changelog](https://github.com/google/go-tpm-tools/blob/main/.goreleaser.yaml)
- [Commits](https://github.com/google/go-tpm-tools/compare/v0.4.4...v0.4.5)

Updates `golang.org/x/sys` from 0.30.0 to 0.31.0
- [Commits](https://github.com/golang/sys/compare/v0.30.0...v0.31.0)

---
updated-dependencies:
- dependency-name: github.com/google/go-cmp
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/google/go-tpm-tools
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-03-05 11:52:46 -08:00
Brandon Weeks
51a20034c0 Bump Go version to 1.24 (#411) 2025-03-05 11:47:52 -08:00
dependabot[bot]
a94a8af69d Bump the github-actions group with 4 updates (#409) 
Bumps the github-actions group with 4 updates: [actions/checkout](https://github.com/actions/checkout), [github/codeql-action](https://github.com/github/codeql-action), [actions/setup-go](https://github.com/actions/setup-go) and [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action).


Updates `actions/checkout` from 2 to 4
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v4)

Updates `github/codeql-action` from 1 to 3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v1...v3)

Updates `actions/setup-go` from 2 to 5
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v2...v5)

Updates `golangci/golangci-lint-action` from 3 to 6
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v3...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-03-05 19:29:43 +00:00
Brandon Weeks
f37925d5d0 Add github-actions to Dependabot config (#408) 2025-03-05 11:26:41 -08:00
zhsh
f7a27487f1 TPM.PCRBanks() should ignore empty PCR banks. (#406)
Some checks failed
CodeQL / Analyze (go) (push) Has been cancelled
Details
Test / test-linux (1.22.x) (push) Has been cancelled
Details
Test / test-linux-tpm12 (1.22.x) (push) Has been cancelled
Details
Test / test-macos (1.22.x) (push) Has been cancelled
Details
Test / test-windows (1.22.x) (push) Has been cancelled
Details
2025-02-24 08:53:28 -08:00
zhsh
d9d8fdc48e attest: Implement discovery of supported PCR banks, rather than always blithely assuming we have exactly SHA1 and SHA256. (#404)
Some checks failed
CodeQL / Analyze (go) (push) Has been cancelled
Details
Test / test-linux (1.22.x) (push) Has been cancelled
Details
Test / test-linux-tpm12 (1.22.x) (push) Has been cancelled
Details
Test / test-macos (1.22.x) (push) Has been cancelled
Details
Test / test-windows (1.22.x) (push) Has been cancelled
Details 
To do this, add a function to attest.TPM called PCRBanks() which enumerates the available PCR banks on a TPM. This requires plumbing through tpmBase and its implementations; the TPM1.2 implementations statically return []HashAlg{HashSHA1}, as one might expect.

To accomplish all of this, the implementation of HashAlg needed to be rethought. Now, instead of a reimplementation of tpm2.Algorithm, it's a lightweight wrapper around it. Dependent methods -- like Hash() and String() -- no longer have case HashSHA1/case HashSHA256 blocks; instead, they simply delegate to go-tpm2 for their implementations. As a result, we should never need to do something like this again.

Also add convenience constants HashSHA384 and HashSHA512.
 2025-02-13 23:38:32 -08:00
dependabot[bot]
f44f5ffe7e Bump golang.org/x/sys from 0.29.0 to 0.30.0 in the go-modules group (#403)
Some checks failed
CodeQL / Analyze (go) (push) Has been cancelled
Details
Test / test-linux (1.22.x) (push) Has been cancelled
Details
Test / test-linux-tpm12 (1.22.x) (push) Has been cancelled
Details
Test / test-macos (1.22.x) (push) Has been cancelled
Details
Test / test-windows (1.22.x) (push) Has been cancelled
Details 
Bumps the go-modules group with 1 update: [golang.org/x/sys](https://github.com/golang/sys).


Updates `golang.org/x/sys` from 0.29.0 to 0.30.0
- [Commits](https://github.com/golang/sys/compare/v0.29.0...v0.30.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-02-10 09:54:13 -08:00
zhsh
9cdb0fcd55 attest: tpm.NewKeyCertifiedBy() method that does not need an entire attest.AK object. The new method only needs the AK handle and its algorithm. (#402)
Some checks failed
CodeQL / Analyze (go) (push) Has been cancelled
Details
Test / test-linux (1.22.x) (push) Has been cancelled
Details
Test / test-linux-tpm12 (1.22.x) (push) Has been cancelled
Details
Test / test-macos (1.22.x) (push) Has been cancelled
Details
Test / test-windows (1.22.x) (push) Has been cancelled
Details
2025-02-03 14:24:55 +11:00
zhsh
dfabc9c919 attest: Support "qualifyingData" when creating a new key. (#401) 2025-02-03 13:43:19 +11:00
Evgeny Shatokhin
c7aee80c5d attest: Support certification by ECC AKs.
Some checks failed
CodeQL / Analyze (go) (push) Has been cancelled
Details
Test / test-linux (1.22.x) (push) Has been cancelled
Details
Test / test-linux-tpm12 (1.22.x) (push) Has been cancelled
Details
Test / test-macos (1.22.x) (push) Has been cancelled
Details
Test / test-windows (1.22.x) (push) Has been cancelled
Details
2025-01-22 08:27:10 -08:00
Evgeny Shatokhin
1b202b12e8 attest: Support creation of ECC AK. 2025-01-22 08:27:10 -08:00
dependabot[bot]
183ad1d5ad Bump the go-modules group across 1 directory with 2 updates (#394)
Some checks failed
CodeQL / Analyze (go) (push) Has been cancelled
Details
Test / test-linux (1.22.x) (push) Has been cancelled
Details
Test / test-linux-tpm12 (1.22.x) (push) Has been cancelled
Details
Test / test-macos (1.22.x) (push) Has been cancelled
Details
Test / test-windows (1.22.x) (push) Has been cancelled
Details 
Bumps the go-modules group with 2 updates in the / directory: [github.com/google/go-tpm](https://github.com/google/go-tpm) and [golang.org/x/sys](https://github.com/golang/sys).


Updates `github.com/google/go-tpm` from 0.9.1 to 0.9.3
- [Release notes](https://github.com/google/go-tpm/releases)
- [Commits](https://github.com/google/go-tpm/compare/v0.9.1...v0.9.3)

Updates `golang.org/x/sys` from 0.28.0 to 0.29.0
- [Commits](https://github.com/golang/sys/compare/v0.28.0...v0.29.0)

---
updated-dependencies:
- dependency-name: github.com/google/go-tpm
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-01-06 17:03:05 -08:00
dependabot[bot]
9cc576ead1 Bump golang.org/x/crypto from 0.17.0 to 0.31.0 in the go_modules group (#390)
Some checks failed
CodeQL / Analyze (go) (push) Has been cancelled
Details
Test / test-linux (1.22.x) (push) Has been cancelled
Details
Test / test-linux-tpm12 (1.22.x) (push) Has been cancelled
Details
Test / test-macos (1.22.x) (push) Has been cancelled
Details
Test / test-windows (1.22.x) (push) Has been cancelled
Details 
Bumps the go_modules group with 1 update: [golang.org/x/crypto](https://github.com/golang/crypto).


Updates `golang.org/x/crypto` from 0.17.0 to 0.31.0
- [Commits](https://github.com/golang/crypto/compare/v0.17.0...v0.31.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-12-12 15:24:52 +01:00
dependabot[bot]
62f7ad0785 Bump golang.org/x/sys in the go-modules group across 1 directory (#385) 2024-11-11 07:32:39 -08:00
dependabot[bot]
f203ad3090 Bump golang.org/x/sys from 0.24.0 to 0.25.0 in the go-modules group (#383) 2024-09-09 16:25:25 +02:00
dependabot[bot]
72657612f0 Bump golang.org/x/sys from 0.23.0 to 0.24.0 in the go-modules group (#382) 
Bumps the go-modules group with 1 update: [golang.org/x/sys](https://github.com/golang/sys).


Updates `golang.org/x/sys` from 0.23.0 to 0.24.0
- [Commits](https://github.com/golang/sys/compare/v0.23.0...v0.24.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-08-12 09:17:08 -07:00
dependabot[bot]
ec740ef912 Bump golang.org/x/sys from 0.22.0 to 0.23.0 in the go-modules group (#381) 
Bumps the go-modules group with 1 update: [golang.org/x/sys](https://github.com/golang/sys).


Updates `golang.org/x/sys` from 0.22.0 to 0.23.0
- [Commits](https://github.com/golang/sys/compare/v0.22.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-08-05 10:41:44 -04:00
dependabot[bot]
51d1c6c3c5 Bump golang.org/x/sys from 0.21.0 to 0.22.0 in the go-modules group (#378) 2024-07-08 07:56:01 -07:00
Brandon Weeks
0c084813e6 Configured Dependabot grouped updates (#376) 2024-06-10 18:00:21 +00:00
dependabot[bot]
5d68dfee1b Bump github.com/google/go-tpm from 0.9.0 to 0.9.1 (#375) 
Bumps [github.com/google/go-tpm](https://github.com/google/go-tpm) from 0.9.0 to 0.9.1.
- [Release notes](https://github.com/google/go-tpm/releases)
- [Commits](https://github.com/google/go-tpm/compare/v0.9.0...v0.9.1)

---
updated-dependencies:
- dependency-name: github.com/google/go-tpm
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-06-10 09:58:30 -07:00
dependabot[bot]
b7a5927d66 Bump golang.org/x/sys from 0.20.0 to 0.21.0 (#374) 
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.20.0 to 0.21.0.
- [Commits](https://github.com/golang/sys/compare/v0.20.0...v0.21.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-06-10 08:58:12 -07:00
dependabot[bot]
b36ec6af0a Bump golang.org/x/sys from 0.19.0 to 0.20.0 (#373) 
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.19.0 to 0.20.0.
- [Commits](https://github.com/golang/sys/compare/v0.19.0...v0.20.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-05-06 08:34:28 -07:00
whongda
0722a4900b Support sha384 RSA signature (#372) 
Add signature algorithm details for sha384 RSA signature so certificates
using it can has its signature algorithm properly parsed
 2024-04-15 15:05:48 -07:00
dependabot[bot]
545501297e Bump golang.org/x/sys from 0.18.0 to 0.19.0 (#371) 
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.18.0 to 0.19.0.
- [Commits](https://github.com/golang/sys/compare/v0.18.0...v0.19.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-04-08 15:29:20 -04:00
dependabot[bot]
5148956a0c Bump github.com/google/go-tpm-tools from 0.4.3 to 0.4.4 (#369) 
Bumps [github.com/google/go-tpm-tools](https://github.com/google/go-tpm-tools) from 0.4.3 to 0.4.4.
- [Release notes](https://github.com/google/go-tpm-tools/releases)
- [Changelog](https://github.com/google/go-tpm-tools/blob/main/.goreleaser.yaml)
- [Commits](https://github.com/google/go-tpm-tools/compare/v0.4.3...v0.4.4)

---
updated-dependencies:
- dependency-name: github.com/google/go-tpm-tools
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-04-01 08:15:39 -07:00
zhsh
a9866d34bb A note for Linux clients of tpm.EKs(). (#368) 
Fix the doc for attest.ActivateCredentialWithEK() as well.
 2024-03-27 09:09:08 -07:00
Liam Murphy
5b3763098f Add critical bool arg to MarshalSubjectAltName to allow SANs to be critical (#367) 2024-03-26 23:34:46 +00:00
dependabot[bot]
e6ab626979 Bump github.com/google/go-tpm-tools from 0.4.2 to 0.4.3 (#364) 
Bumps [github.com/google/go-tpm-tools](https://github.com/google/go-tpm-tools) from 0.4.2 to 0.4.3.
- [Release notes](https://github.com/google/go-tpm-tools/releases)
- [Changelog](https://github.com/google/go-tpm-tools/blob/main/.goreleaser.yaml)
- [Commits](https://github.com/google/go-tpm-tools/compare/v0.4.2...v0.4.3)

---
updated-dependencies:
- dependency-name: github.com/google/go-tpm-tools
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-03-26 16:55:42 +00:00
dependabot[bot]
52542411c5 Bump golang.org/x/sys from 0.16.0 to 0.18.0 (#365) 
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.16.0 to 0.18.0.
- [Commits](https://github.com/golang/sys/compare/v0.16.0...v0.18.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-03-26 09:53:17 -07:00
dependabot[bot]
02cf9e2ddd Bump golang.org/x/sys from 0.15.0 to 0.16.0 (#360) 
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.15.0 to 0.16.0.
- [Commits](https://github.com/golang/sys/compare/v0.15.0...v0.16.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-08 09:25:02 -08:00
dependabot[bot]
8b301f2d45 Bump golang.org/x/crypto from 0.13.0 to 0.17.0 (#359) 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.13.0 to 0.17.0.
- [Commits](https://github.com/golang/crypto/compare/v0.13.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-18 15:34:50 -08:00
dependabot[bot]
3d017c0234 Bump golang.org/x/sys from 0.14.0 to 0.15.0 (#358) 
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.14.0 to 0.15.0.
- [Commits](https://github.com/golang/sys/compare/v0.14.0...v0.15.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-04 10:58:25 -08:00
Marcin Wielgoszewski
a3545dfc94 don't drop leading zeroes when performing generic ecdsa signing (#357) 
call ret.FillBytes() instead of ret.Bytes() to preserve leading zeroes that may have been dropped when converting the digest to an integer
v0.5.1 		2023-11-09 08:39:58 -08:00
dependabot[bot]
93c5899459 Bump golang.org/x/sys from 0.13.0 to 0.14.0 (#356) 
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.13.0 to 0.14.0.
- [Commits](https://github.com/golang/sys/compare/v0.13.0...v0.14.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-11-06 07:47:43 -08:00