Attestation libraries

services/attest/BUILD.bazel

@@ -0,0 +1,23 @@
+# Licensed under the Apache-2.0 license
+# SPDX-License-Identifier: Apache-2.0
+
+package(default_visibility = ["//visibility:public"])
+
+# All production crates (embedded-safe, no test stubs).
+filegroup(
+    name = "attest_embedded_all",
+    srcs = [
+        "//services/attest/api:attest_api",
+        "//services/attest/producer:attest_producer",
+    ],
+)
+
+# Host-side tests; run without embedded target config.
+test_suite(
+    name = "attest_host_tests",
+    tests = [
+        "//services/attest/api:attest_api_test",
+        "//services/attest/producer:attest_producer_integration_test",
+        "//services/attest/producer:attest_producer_unit_test",
+    ],
+)

services/attest/README.md

@@ -0,0 +1,28 @@
+<!-- SPDX-License-Identifier: Apache-2.0 -->
+
+# attest service
+
+OCP-EAT attestation token producer for OpenPRoT.
+
+## Crates
+
+| Crate | Path | Purpose |
+|---|---|---|
+| `openprot-attest-api` | `api/` | Platform-independent traits, types, and error definitions. Callers depend only on this crate. |
+| `openprot-attest-producer` | `producer/` | Concrete `AttestProducer` implementations (`HwAttestProducer`, `SwAttestProducer`, `SoftwareAttestProducer`). |
+
+## Dependency structure
+
+```
+application / verifier service
+    └── openprot-attest-api   (traits + types only)
+            └── openprot-attest-producer  (production implementations)
+```
+
+Platform code selects an implementation at construction time:
+
+- **`HwAttestProducer`** — backed by the Caliptra mailbox driver; all signing inside the hardware boundary.
+- **`SwAttestProducer`** — backed by a caller-supplied P-384 key (`SwSigner`); no Caliptra required.
+- **`SoftwareAttestProducer`** — software stub for tests (feature = `test-support`).
+
+See each crate's README for API details and usage examples.

services/attest/api/BUILD.bazel

@@ -0,0 +1,24 @@
+# Licensed under the Apache-2.0 license
+# SPDX-License-Identifier: Apache-2.0
+
+load("@rules_rust//rust:defs.bzl", "rust_library", "rust_test")
+
+rust_library(
+    name = "attest_api",
+    srcs = glob(["src/**/*.rs"]),
+    crate_name = "openprot_attest_api",
+    edition = "2021",
+    visibility = ["//visibility:public"],
+    deps = [
+        "@rust_crates//:heapless",
+        "@rust_crates//:p384",
+        "@rust_crates//:sha2",
+        "@rust_crates//:thiserror",
+        "@rust_crates//:zeroize",
+    ],
+)
+
+rust_test(
+    name = "attest_api_test",
+    crate = ":attest_api",
+)

services/attest/api/Cargo.toml

@@ -0,0 +1,16 @@
+# Licensed under the Apache-2.0 license
+# SPDX-License-Identifier: Apache-2.0
+
+[package]
+name = "openprot-attest-api"
+version = "0.1.0"
+edition = "2021"
+license = "Apache-2.0"
+description = "Platform-independent API for the OpenPRoT attestation producer service"
+
+[dependencies]
+heapless = { version = "0.9", default-features = false }
+thiserror = "2"
+p384 = { version = "0.13", default-features = false, features = ["ecdsa", "arithmetic"] }
+sha2 = { version = "0.10", default-features = false }
+zeroize = { version = "1.8", default-features = false, features = ["derive"] }

services/attest/api/README.md

@@ -0,0 +1,140 @@
+<!-- SPDX-License-Identifier: Apache-2.0 -->
+
+# openprot-attest-api
+
+Platform-independent trait and type definitions for the OpenPRoT attestation
+producer service.
+
+Callers and other OpenPRoT services depend **only** on this crate. It has no
+dependency on the producer implementation, the verifier module, or `spdm-lib`.
+
+## Purpose
+
+This crate defines the stable interface boundary for attestation token
+generation. By depending on `openprot-attest-api` rather than
+`openprot-attest-producer`, services can be tested with any `AttestProducer`
+implementation — including the `SoftwareAttestProducer` stub — without pulling
+in hardware dependencies.
+
+## Source files
+
+| File | Contents |
+|---|---|
+| `src/lib.rs` | Public re-exports. `#![no_std]` `#![forbid(unsafe_code)]`. |
+| `src/traits.rs` | `AttestProducer` trait. |
+| `src/signing_abstraction.rs` | `HwSigner` trait; `SwSigner` struct with P-384 key validation and ECDSA signing. |
+| `src/types.rs` | `Measurement`, `DigestAlgorithm`, `MeasurementAuthority`, `AttestConfig`, `OemId`, `MeasurementProvider` trait, `SwSignerConfig` struct. |
+| `src/consts.rs` | Fixed-capacity constants (`MAX_CERT_SIZE`, `MAX_CHAIN_LEN`, etc.). |
+| `src/error.rs` | `AttestError` — shared error type for both service crates. |
+
+## Key traits
+
+### `AttestProducer`
+
+The primary interface implemented by `HwAttestProducer`, `SwAttestProducer`,
+and the `SoftwareAttestProducer` stub in the producer crate.
+
+```rust
+pub trait AttestProducer {
+    fn generate_token(
+        &self,
+        nonce: &[u8],
+        out: &mut Vec<u8, MAX_TOKEN_SIZE>,
+    ) -> Result<(), AttestError>;
+
+    /// `buf` is cleared before being populated with the chain (leaf → root).
+    fn cert_chain(
+        &self,
+        buf: &mut Vec<Vec<u8, MAX_CERT_SIZE>, MAX_CHAIN_LEN>,
+    ) -> Result<(), AttestError>;
+}
+```
+
+### `HwSigner`
+
+Abstracts signing and certificate operations backed by the Caliptra hardware
+boundary.
+
+```rust
+pub trait HwSigner {
+    fn sign(&self, payload: &[u8]) -> Result<[u8; 96], AttestError>;
+    fn cert_chain_der(
+        &self,
+        buf: &mut Vec<Vec<u8, MAX_CERT_SIZE>, MAX_CHAIN_LEN>,
+    ) -> Result<(), AttestError>;
+    fn measurements(
+        &self,
+        out: &mut Vec<Measurement, MAX_MEASUREMENTS>,
+    ) -> Result<(), AttestError>;
+}
+```
+
+The private Alias Key never leaves Caliptra. Production code implements this
+trait via the Caliptra mailbox driver (`caliptra-sw`).
+
+### `SwSigner`
+
+Holds a caller-supplied P-384 private key and DER certificate chain for
+software signing (no Caliptra hardware required). Constructed via
+`SwSigner::new(SwSignerConfig { ... })`, which validates:
+
+- Scalar is a valid P-384 private key (`1 ≤ d < n`), via `p384::ecdsa::SigningKey::from_bytes`.
+- Cert chain contains at least one certificate.
+- Every certificate begins with `0x30` (DER SEQUENCE tag).
+
+Returns `Err(AttestError::InvalidKey)` on any violation. The key is stored as
+a `SigningKey` which zeroizes on drop. `SwSignerConfig` also zeroizes the raw
+scalar on drop.
+
+`sign()` produces a real ECDSA P-384 signature (SHA-384 prehash, RFC 6979
+deterministic nonce) over the COSE `Sig_Structure`.
+
+### `MeasurementProvider`
+
+Plug in platform-specific firmware measurement sources (UEFI, BMC, etc.)
+beyond the Caliptra-internal measurements.
+
+```rust
+pub trait MeasurementProvider {
+    fn measurements(
+        &self,
+        out: &mut Vec<Measurement, MAX_MEASUREMENTS>,
+    ) -> Result<(), AttestError>;
+}
+```
+
+## Key types
+
+| Type | Description |
+|---|---|
+| `Measurement` | Single firmware measurement: component name, version, digest algorithm, digest bytes, measurement authority. |
+| `DigestAlgorithm` | `Sha384` or `Sha512`. |
+| `MeasurementAuthority` | `Caliptra` (hardware-measured) or `Platform` (software-registered). |
+| `AttestConfig` | Producer configuration: `oemid`, `hw_model`. |
+| `OemId` | OEM identifier (IANA Private Enterprise Number or UUID form). |
+| `SwSignerConfig` | Input to `SwSigner::new`: 48-byte P-384 scalar and DER cert chain. Zeroizes scalar on drop. |
+
+## Error variants
+
+| Variant | Meaning |
+|---|---|
+| `Mailbox` | Caliptra mailbox communication failure. |
+| `Der` | DER parse error (malformed certificate structure). |
+| `ChainValidation` | DICE chain structural or compliance failure. |
+| `InvalidNonce` | Nonce length outside the 8–64 byte range. |
+| `Cbor` | CBOR encoding error. |
+| `BufferFull` | Fixed-size buffer capacity exceeded. |
+| `Cose` | COSE signing error. |
+| `Provider` | Measurement provider error. |
+| `InvalidKey` | Invalid P-384 key material supplied to `SwSigner::new`. |
+
+## Cargo
+
+```toml
+[dependencies]
+openprot-attest-api = { path = "services/attest/api" }
+```
+
+The crate is `no_std` and depends on `heapless` for fixed-capacity
+collections, `thiserror` for `AttestError`, `p384` + `sha2` for ECDSA
+signing, and `zeroize` for key material cleanup.

services/attest/api/src/consts.rs

@@ -0,0 +1,18 @@
+// Licensed under the Apache-2.0 license
+// SPDX-License-Identifier: Apache-2.0
+
+// Caliptra chain: VendorCA → IDevID → LDevID → AliasFMC → AliasRT (leaf)
+pub const MAX_CHAIN_LEN: usize = 5;
+pub const MAX_CERT_SIZE: usize = 2048;
+
+pub const MAX_MEASUREMENTS: usize = 16;
+pub const MAX_PROVIDERS: usize = 8;
+pub const MAX_COMPONENT_LEN: usize = 64;
+pub const MAX_VERSION_LEN: usize = 32;
+pub const MAX_DIGEST_LEN: usize = 64; // SHA-512
+
+pub const MAX_OEMID_LEN: usize = 16;
+pub const MAX_HW_MODEL_LEN: usize = 64;
+
+// Upper bound for a fully-populated COSE_Sign1 token
+pub const MAX_TOKEN_SIZE: usize = 8192;

services/attest/api/src/error.rs

@@ -0,0 +1,24 @@
+// Licensed under the Apache-2.0 license
+// SPDX-License-Identifier: Apache-2.0
+
+#[derive(Debug, thiserror::Error)]
+pub enum AttestError {
+    #[error("Mailbox error: {0}")]
+    Mailbox(&'static str),
+    #[error("DER parse error: {0}")]
+    Der(&'static str),
+    #[error("DICE chain validation error: {0}")]
+    ChainValidation(&'static str),
+    #[error("Invalid nonce: {0}")]
+    InvalidNonce(&'static str),
+    #[error("CBOR encoding error")]
+    Cbor,
+    #[error("Fixed-size buffer capacity exceeded")]
+    BufferFull,
+    #[error("COSE signing error")]
+    Cose,
+    #[error("Measurement provider error: {0}")]
+    Provider(&'static str),
+    #[error("Invalid key material: {0}")]
+    InvalidKey(&'static str),
+}

services/attest/api/src/lib.rs

@@ -0,0 +1,42 @@
+// Licensed under the Apache-2.0 license
+// SPDX-License-Identifier: Apache-2.0
+
+//! Platform-independent API for the OpenPRoT attestation producer service.
+//!
+//! # Usage
+//!
+//! Applications depend only on this crate. Platform code provides a concrete
+//! [`AttestProducer`] implementation (hardware-backed via a platform signer, or the
+//! `test-support`-gated software stub in the `openprot-attest-producer` crate).
+//!
+//! ```text
+//! ┌───────────────────────────────────────────────┐
+//! │  application / verifier service               │
+//! │      depends on: openprot-attest-api          │
+//! │      calls:      AttestProducer::generate_token│
+//! └──────────────────┬────────────────────────────┘
+//!                    │ trait object / generic bound
+//! ┌──────────────────▼────────────────────────────┐
+//! │  openprot-attest-producer                     │
+//! │      HwAttestProducer  (production, HW key)   │
+//! │      SwAttestProducer  (production, SW key)   │
+//! │      SoftwareAttestProducer (test-support)    │
+//! └───────────────────────────────────────────────┘
+//! ```
+
+#![no_std]
+#![forbid(unsafe_code)]
+
+pub mod consts;
+mod error;
+mod signing_abstraction;
+mod traits;
+mod types;
+
+pub use error::AttestError;
+pub use signing_abstraction::{HwSigner, SwSigner};
+pub use traits::AttestProducer;
+pub use types::{
+    AttestConfig, DigestAlgorithm, Measurement, MeasurementAuthority, MeasurementProvider, OemId,
+    SwSignerConfig,
+};