Tags

v0.9.2

Implemented the Verifier and put the Auditor in Firewall mode. The changes are as follows:

- Implemented and tested the Verifier application.
- Renamed `createConfig` -> `setupTools` and grouped commands into three command classes (tpm, key-exchange, config).
  Added kyber-based key-exchange.
  Added pcr-extend and pcr-reset commands.
- The Prover can now attest and send extradata and the eventlog over network.
  Both the Auditor and the Verifier assume that this data has been extended into one of the Provers PCRs.
  `setupTool` can extend the Provers TPM accordingly.
- Both the Verifier and the Auditor contribute enough nonce to the attestation that freshness is guaranteed.
- Enhanced the stability.
- Refactored datatype.PCRs and introduced additional wrapper classes to enhance type-safety and readability.
- Extended the codes documentation and wrote proper setup/how-to guides. Moved the documentation into root.
- Introduced api.Outbound and api.Inbound connections.
- Replaced tpm2.TPMIAlgHash with the new type `cryptoutil.Hash`.
- Upgraded to go 1.25.6.

v0.9.1

v0.9.0

Submission version thesis

v0.8.2

Layout und Arbeit bis Kapitel 4 ungefähr fertig. Fettes TODO: Kapitel 5-6

v0.8.1

Resolved most of styling issues. Added final changes to all chapters except of 4-5. Security analysis makes progress. TODO: Chapter 4-5

v0.8.0

Finished section 1, 2, 3 and 6- for the most parts. TODO: rewrite section 4 and 5.

v0.7.4

Refactored large portions of the code and introduced a transcript which can be verified by an external party - the verifier. Introduced the new architecture in my thesis, extended the security analysis and added an explanation of my implementation.

v0.7.3

Exported and refactored configReader. Refactored cryptoutil completely and moved the computation of object names into the PublicKeyContext. Extended documentation, but it is not readable yet.

v0.7.2

Refactored large portions of the code, introduced countless improvements in the thesis.

v0.7.1

Added Glossary. Introduced the most relevant terms. Fixed a lot of the styling issues.

v0.7.0

early draft of my thesis. It contains all relevant background information, and a security analysis with an attack model, scope, and stakeholders. In addition, it contains a rough description of the implementation details, and architecture. Large portions of the text are not proofread. Documentation has been boiled down to the installation, and description of configuration options. Added a section about forward compatibility. Added untested, and as of yet unused portions to the code.

v0.6.0

Implemented basic MakeCredential command for ECDSA-keys. Added tamper-detection features to mkII code. Moved (L1/L2 + exception)-tables into the internal RAM

v0.5.5

Replaced SigScheme with KeyScheme. KeyScheme does not only specifiy the algorithm type, but also a selection of TPMAObject flags, SymKeyParameters, and an Authorization Policy. Refactored large parts of the code, including the verifier code. MakeCredential and AuditPCR are not fully functional yet.

v0.5.4

Moved embed:config into top-level. config files are now read from build/config. Makefile supports custom-configs stored in config/YourConfig. Added proper compilation of the documentation via just build-all.

v0.5.3

added proper support for rsassa-keys. Added support for alternative hashing algos. cleaned up and extended tests. refactored code.

v0.5.2

Added embedded config file support to cmd/mkII. Completed refactoring of verifier and moved it to internal/nethelper

v0.5.1

remote attestation tested on the usb armory mkII. Refactored host and verifier. However the token only supports listening mode for now...

v0.5.0

First Milestone: Implemented basic remote-attestation between an emulated token and the host.\n Added mkII application files to the project. Makefile can generate host and token files which are placed in the build/ directory. However the token cannot open connections to the host yet, presumably due to missing entries in the routing table?

v0.4.2

Cleaned up code basis. Support for proper remote attestation. Quote verification is now properly implemented. Verification of key and quote is supported. Quote verification is done against pcrReference entries which are set in human-readable form at initialization.

v0.4.1

cleaned code basis. Added proof of concept CertifyAk verification, however it is incomplete. Details see comment in tpmhelper_test.