Skip to content

Add IDK_S PTA - #1026

Open
Sangho Lee (sangho2) wants to merge 2 commits into
mainfrom
sanghle/optee/idks_pta
Open

Add IDK_S PTA#1026
Sangho Lee (sangho2) wants to merge 2 commits into
mainfrom
sanghle/optee/idks_pta

Conversation

@sangho2

@sangho2 Sangho Lee (sangho2) commented Jul 13, 2026

Copy link
Copy Markdown
Contributor

This PR introduces the IDK_S PTA. It currently provides one method which endorses TA-provided data with IDK_S.

@sangho2 Sangho Lee (sangho2) added the discussion Open questions label Jul 13, 2026
@sangho2
Sangho Lee (sangho2) force-pushed the sanghle/optee/idks_pta branch 2 times, most recently from 91e4c3a to 205a633 Compare July 14, 2026 00:14
@sangho2 Sangho Lee (sangho2) changed the title [DRAFT] IDK_S PTA [DRAFT] Add IDK_S PTA Jul 14, 2026
@sangho2
Sangho Lee (sangho2) force-pushed the sanghle/optee/idks_pta branch 4 times, most recently from e5a3e08 to 65a67fb Compare July 14, 2026 20:01
@sangho2 Sangho Lee (sangho2) changed the title [DRAFT] Add IDK_S PTA [DRAFT] IDK_S PTA Jul 14, 2026
@sangho2
Sangho Lee (sangho2) force-pushed the sanghle/lvbs/idk branch 3 times, most recently from 300e832 to 1cb91e6 Compare July 22, 2026 16:11
Comment on lines +146 to +164
fn build_endorsement_data(
ta_data: &[u8],
ta_uuid: &TeeUuid,
ta_svn: u32,
ta_digest: &TaDigest,
) -> Option<Vec<u8>> {
// MAGIC || VERSION || TA_DATA || TA_UUID || TA_SVN || TA_DIGEST || DEBUG || ISOLATION_SOLUTION
let capacity = ta_data.len().checked_add(IDKS_ENDORSEMENT_METADATA_LEN)?;
let mut endorsement = Vec::with_capacity(capacity);
endorsement.extend_from_slice(IDKS_ENDORSEMENT_MAGIC);
endorsement.extend_from_slice(&IDKS_ENDORSEMENT_VERSION.to_le_bytes());
endorsement.extend_from_slice(ta_data);
endorsement.extend_from_slice(&ta_uuid.to_le_bytes());
endorsement.extend_from_slice(&ta_svn.to_le_bytes());
endorsement.extend_from_slice(ta_digest);
endorsement.push(IDKS_DEBUG_FLAG);
endorsement.extend_from_slice(ISOLATION_SOLUTION);
Some(endorsement)
}

@sangho2 Sangho Lee (sangho2) Jul 22, 2026

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This function would be the most important one within this PR. Need to decide the data to include and the claim format. Don't prefer to use any specific format (e.g., C-struct, JSON, CBOR/COSE, ...) here because it heavily depends on what the verifier expects.

@sangho2 Sangho Lee (sangho2) added the must-not-merge:prototype An experimental/proof-of-concept PR that must not be merged. label Jul 22, 2026
@sangho2
Sangho Lee (sangho2) force-pushed the sanghle/optee/idks_pta branch 2 times, most recently from bdd2a3a to 03cf03e Compare July 23, 2026 15:25
@sangho2
Sangho Lee (sangho2) force-pushed the sanghle/lvbs/idk branch 2 times, most recently from b1df4fd to 81667ad Compare July 24, 2026 16:52
Base automatically changed from sanghle/lvbs/idk to main July 24, 2026 17:13
@sangho2 Sangho Lee (sangho2) changed the title [DRAFT] IDK_S PTA Add IDK_S PTA Aug 3, 2026
@sangho2
Sangho Lee (sangho2) marked this pull request as ready for review August 3, 2026 17:26
@sangho2 Sangho Lee (sangho2) removed discussion Open questions must-not-merge:prototype An experimental/proof-of-concept PR that must not be merged. labels Aug 3, 2026
@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown

🤖 SemverChecks 🤖 No breaking API changes detected

Note: this does not mean API is unchanged, or even that there are no breaking changes; simply, none of the detections triggered.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant