spiffe/spire

Update tpmdevid NodeAttestor plugin to use go-tpm TPM-Direct API

Open

#4,305 opened on Jun 29, 2023

View on GitHub
 (4 comments) (0 reactions) (0 assignees)Go (631 forks)auto 404
help wantedpriority/backlogstale

Repository metrics

Stars
 (2,443 stars)
PR merge metrics
 (PR metrics pending)

Description

github.com/google/go-tpm v0.9.0 introduced a new set of APIs called the TPM-Direct API. This was a significant redesign of the API that requires a refactor of the tpmdevid NodeAttestor in order to utilize.

The older APIs currently used by the tpmdevid NodeAttestor were put into maintenance mode with no active development. We should look into migrating to the TPM-Direct API, which is the currently supported API from the go-tpm project.

Contributor guide

Research direction
Study the current tpmdevid plugin's use of go tpm, specifically the old API calls, and replace them with the new TPM Direct API equivalents. Ensure all tests pass and functionality remains unchanged.
Tech stack
go
Domain
backendsecurity
Issue type
Refactor
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
3-5 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
Go
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
50