Comments (4)
The Integrator needs to monitor request_attribute
and the SignatureRequested
bit, since content_change
can only be asserted when a signature is requested. So it keeps track of measurements when SignatureRequested
is not set, and does a comparison when SignatureRequested
is set.
from libspdm.
Thanks and I think that works for normal scenario. But as "Any communication between Requester and Responder other than a GET_MEASUREMENTS request or response re-initializes L1/L2 computation to null .", the integrator seems not able to know if L1/L2 has been re-inited?
from libspdm.
Yes, that looks like it's an issue. The state of the l1/l2 transcript is stored in the spdm_context
but it is currently not public. We would need to provide a public function to query the transcript state. @jyao1 does that sound good?
from libspdm.
I feel a callback function to notify L1/L2 was reset might be easier for integrators to track the measurement.
Maybe provide a callback function for transcript state change (similar to connection state callback)?
from libspdm.
Related Issues (20)
- Build failure in `spdm_device_secret_lib_sample`
- Build failure in `libspdm_rsp_challenge_auth.c` HOT 2
- Core libraries must not zeroize the receive buffer
- Removal of disclaimer that libspdm is not fit for production HOT 3
- Incorrect use of logical negation in unit tests HOT 1
- Need add `FINISH_RSP` test case to cover the scenario: either the Requester or the Responder set `HANDSHAKE_IN_THE_CLEAR_CAP` to 0.
- Handle Responder sending `END_SESSION` in application phase HOT 3
- The version assert check is duplicate in get_csr and set_cert
- The libspdm_event_get_types API should not be under the LIBSPDM_ENABLE_CAPABILITY_CSR_CAP
- the vendor_cmds requester unit_test has some error HOT 3
- DOE Discovery Version shall be supported in pci_doe_discovery
- `libspdm_set_mem(requester_context, SPDM_REQ_CONTEXT_SIZE, 0xAA)` will overflow write in `libspdm_test_responder_measurements_case36` HOT 1
- github_pages branch vastly inflates size of repository HOT 4
- Certificate chain parsing fails HOT 2
- Improve `LIBSPDM_DATA_LOCAL_PUBLIC_CERT_CHAIN` documentation
- Capability flags should be masked with version mask HOT 1
- Update CodeQL actions from version 2 to version 3
- Dead code after loop
- Out-of-bounds array read
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from libspdm.