Skip to content

feat: update library as per draft-ietf-rats-corim-11 spec - #21

Open
shefali-kamal wants to merge 2 commits into
veraison:mainfrom
MonakaResearch:main
Open

feat: update library as per draft-ietf-rats-corim-11 spec#21
shefali-kamal wants to merge 2 commits into
veraison:mainfrom
MonakaResearch:main

Conversation

@shefali-kamal

@shefali-kamal shefali-kamal commented Sep 4, 2026

Copy link
Copy Markdown

This PR introduced below changes/updates:

Remove CE and CES:

  • Remove Conditional Endorsement (CE) and CE Series (CES) triple parsing, as they are not supported by the Arm CCA, only supported scheme as of now by Cover

Update library as per draft-ietf-rats-corim-11:

  • Refactor ECT structures by introducing CommonEct and renaming Ect to ElementEct. Ect now refers to enum representing all ect(s).
  • Add key-ect support and populate key relations from key triple records
  • Add support for inputting verfier-key and use it as authority for for key addition ect.
  • For unsigned corims, input verifier-key is used as authority.
  • Refactor evidence/reference-value measurement map conversion using From trait on ElementMap
  • Update CM-Type handling according to CoRIM spec revision 11. Supported only 3 types of cm-type now.
  • Add profile compatibility checks for input evidence formats
  • Validate CoRIMs and reject expired or unsupported profiles CoRIMs.
  • Added Unit tests for added functionality.
  • Update test data, with CCA required fields, and tests to ensure the complete test suite passes
  • Apply Rust formatting and Clippy fixes and bump dependencies to latest versions.

…triple parsing, as they are not supported by the Arm CCA, only supported scheme as of now by Cover

- Update README and lib.rs to remove obsolete CE Series triple parsing references
- update dependencies and remove unsupported CE parsing
- Fix Clippy redundant-reference warning with Clippy 0.1.97
- Update anyhow to 1.0.104 to address cargo-deny advisory warning

Signed-off-by: Patel, Ajay Kumar <Ajaykumar.Patel@fujitsu.com>

@setrofim setrofim left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Also, please update the commit message to be compliant with conventions commits:

  • Update(library): are not valid type/scope; should be just feat: (the scope is optional and can be omitted if the change is not local to a specific part).
  • Commit title should not end with a period.
  • Commits that break compatibility should have a ! following the type/scope (before the :), and should have a BREAKING CHANGE: footer explaining the nature of the change.

Comment thread src/bin/main.rs
}
let result = verifier.verify(&args.scheme, evidence.as_slice(), nonce.as_deref())?;

debug!("ACS: {}", serde_json::to_string(&result.acs)?);

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why remove this?

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

My bad, deleted while removing other debugging statements. Will add it back.

Comment thread README.md
based on an identifier inside the evidence. This is scheme-specific. For CCA, the instance ID
is used. Evidence claims are then extracted as ECT (environment-claims tuple) records.
- The evidence ECTs are then matched to the relations in the corim store. This results in the
ACS (appraisal claims set) -- a vector of ECT records containing evidence claims and matched

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is correct. -- in ASCII indicates an em-dash (rather than a hypen), which is what is intended here.

@shefali-kamal shefali-kamal changed the title Update(library): update Update COVER library as per draft-ietf-rats-corim-11 spec. feat: update Update COVER library as per draft-ietf-rats-corim-11 spec. Sep 7, 2026
@shefali-kamal shefali-kamal changed the title feat: update Update COVER library as per draft-ietf-rats-corim-11 spec. feat: Update COVER library as per draft-ietf-rats-corim-11 spec Sep 7, 2026
@shefali-kamal shefali-kamal changed the title feat: Update COVER library as per draft-ietf-rats-corim-11 spec feat: update library as per draft-ietf-rats-corim-11 spec Sep 7, 2026
- Refactor ECT structures by introducing CommonEct and renaming Ect to ElementEct. Ect now refers to enum representing all ect(s)
- Add key-ect support and populate key relations from key triple records
- Add support for inputting verfier-key and use it as authority for for key addition ect
- For unsigned corims, input verifier-key is used as authority
- Refactor evidence/reference-value measurement map conversion using From trait on ElementMap
- Update CM-Type handling according to CoRIM spec revision 11. Supported only 3 types of cm-type now
- Add profile compatibility checks for input evidence formats
- Validate CoRIMs and reject expired or unsupported profiles CoRIMs
- Added Unit tests for added functionality
- Update test data, with CCA required fields, and tests to ensure the complete test suite passes
- Apply Rust formatting and Clippy fixes and bump dependencies to latest versions

Signed-off-by: Patel, Ajay Kumar <Ajaykumar.Patel@fujitsu.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants