mirror of
https://github.com/google/go-attestation.git
synced 2025-04-07 11:26:47 +00:00
f0e8d0fe7c
@brandonweeks detected another case of the "make([]T, untrustedValue)" pattern, which would allow an attacker to cause the parser to allocate an unbounded amount of memory. Fix this by reading one algorithm at a time instead of pre-allocating a slice of algorithms.
Go-Attestation
Go-Attestation abstracts remote attestation operations across a variety of platforms and TPMs.
Installation
The go-attestation package is installable using go get: go get github.com/google/go-attestation/attest
Linux users must install libtspi and its headers. This can be installed on debian-based systems using: sudo apt-get install libtspi-dev.
Status
Go-Attestation is under active development and is not ready for production use. Expect API changes at any time.
Please note that this is not an official Google product.