Skip to content

Commit 5c9bb13

Browse files
Use CWT claim names (#53)
Another follow up to #48. Signed-off-by: Steven Bellock <sbellock@nvidia.com>
1 parent 0a28d14 commit 5c9bb13

File tree

2 files changed

+4
-4
lines changed

2 files changed

+4
-4
lines changed

specifications/ietf-eat-profile/cddl/ietf_eat_ocp_profile.cddl

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
cwt-envelope-signed-eat = {
22
; The EAT Profile for OCP OID
3-
&(eat_profile : 265 ) => ~oid ; TODO: OCP Security to assign a value - note: `~` strips CBOR tag #6.111(oid) from `oid`
3+
&(EAT Profile : 265 ) => ~oid ; TODO: OCP Security to assign a value - note: `~` strips CBOR tag #6.111(oid) from `oid`
44

55
; Issuer claim is StringOrURI (tstr)
66
&(iss : 1) => tstr
@@ -9,7 +9,7 @@ cwt-envelope-signed-eat = {
99
&(Nonce : 10) => bstr
1010

1111
; EAT measurements claim is defined in section-4.2.16
12-
&(measurements : 273) => measurements-type
12+
&(Measurements : 273) => measurements-type
1313

1414
; Private Claims (they have to be < -65536 for rfc8392) per RFC 8392
1515

specifications/ietf-eat-profile/spec.ocp

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -155,13 +155,13 @@ in the unsigned section of the COSE_Sign1 header.
155155
The CWT claim set is intentionally minimalistic, serving primarily as an
156156
integrity-protected wrapper for concise evidence.
157157

158-
1. **eat_profile**
158+
1. **EAT Profile**
159159
* This claim is used by the attester to identify the profile. It **MUST** be present and **SHALL** contain the OID assigned to the OCP Profile. **TODO: OCP to assign OID Value**
160160
2. **issuer**
161161
* This claim is optionally used by the attester to bind the EAT to the certificate chain that issued it. If present, **SHALL** match the SUBJECT Common Name of the Attestation Key (AK) Certificate.
162162
3. **Nonce**
163163
* This claim is used by the attester to ensure the freshness of the response. It **MUST** be present and **SHALL** be a string or an array of strings. It **SHALL** contain as minimum the nonce value passed by the requester.
164-
4. **measurements**
164+
4. **Measurements**
165165
* This claim is used by the attester to present the target environment claims that verifier will consume for the appraisal policy. It **MUST** be present and **SHALL** encapsulate a “concise-evidence” using the appropriate IANA media type.
166166
5. **rim-locators**
167167
* This claim is used by the attester to point the verifier to the rim repository. If present, **SHALL** be an array of corim-locator-map (as defined by the IETF CoRIM Draft).

0 commit comments

Comments
 (0)