evidence.md

Evidence

OAAS的用户无需手动收集并组装Evidence，可直接使用Evidence Collector Tool收集当前运行环境TEE平台的证据（Base64编码）.

本文介绍Base64编码前的Evidence内部格式，以供深度调试时参考。

Intel TDX/SGX

{
    "quote": <Base64 Encoded Quote Binary>
}

AMD SEV-SNP

{
    "attestation_report": <SEV AttestationReport Structure>,
    "cert_chain": [
        <SEV CertTableEntry Structure>，
        <SEV CertTableEntry Structure>，
        ...
    ]
}

结构体字段和内容类型参考：

• SEV AttestationReport Structure
• SEV CertTableEntry Structure

HYGON CSV

{
    "attestation_report": <CSV AttestationReport Structure>,
    "cert_chain": {
        "hsk": <CSV CA Certificate Structure>,
        "cek": <CSV Certificate Structure>,
        "pek": <CSV Certificate Structure>,
    }
}

结构体字段和内容类型参考：

• CSV AttestationReport Structure
• CSV CA Certificate Structure
• CSV Certificate Structure

Arm CCA

{
    "token": <u8 array CCA token>
}

Sample (FOR TEST ONLY)

Sample并不是一个真实的TEE类型，它仅可用于测试OAAS实例的连通性。

{
    "svn": "1",
    "report_data": <string>,
    "init_data_hash": <string>,
}