ExternalVendorCode/go-attestation
1
0
Fork 0
mirror of https://github.com/google/go-attestation.git synced 2024-12-18 20:47:57 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity
121 Commits 3 Branches 15 Tags 4.6 MiB
Go 98%
Shell 2%
f0e8d0fe7c
Go to file
Eric Chiang f0e8d0fe7c attest: fix another unbounded memory allocation 
@brandonweeks detected another case of the "make([]T, untrustedValue)"
pattern, which would allow an attacker to cause the parser to allocate
an unbounded amount of memory.

Fix this by reading one algorithm at a time instead of pre-allocating a
slice of algorithms.
2019-10-09 08:39:15 -07:00
attest attest: fix another unbounded memory allocation 2019-10-09 08:39:15 -07:00
ci Implement full coverage for TPM 1.2 tests. (#7) 2019-04-04 15:33:00 -07:00
docs Write overview of the credential activation procedure (#93) 2019-09-05 13:03:58 -07:00
CONTRIBUTING.md Initial commit. 2019-03-28 13:21:16 -07:00
go.mod go.mod: update using "go mod tidy" 2019-09-26 13:06:07 -07:00
go.sum Update to latest go-tpm (#106) 2019-09-20 12:45:57 -07:00
LICENSE Initial commit. 2019-03-28 13:21:16 -07:00
README.md Update README with installation notes (#88) 2019-08-29 09:36:35 -07:00

README.md

Go-Attestation

GoDoc

Go-Attestation abstracts remote attestation operations across a variety of platforms and TPMs.

Installation

The go-attestation package is installable using go get: go get github.com/google/go-attestation/attest

Linux users must install libtspi and its headers. This can be installed on debian-based systems using: sudo apt-get install libtspi-dev.

Status

Go-Attestation is under active development and is not ready for production use. Expect API changes at any time.

Please note that this is not an official Google product.