diff --git a/docs/protocols/remote_attestation.puml b/docs/protocols/remote_attestation.puml index 1398474..ec2cedf 100644 --- a/docs/protocols/remote_attestation.puml +++ b/docs/protocols/remote_attestation.puml @@ -21,7 +21,7 @@ TPM->attester_agent: (AK_handle, AK_pub) attester_agent->TPM: tpm2_quote (PCRs, nonce) TPM->attester_agent: Quote attester_agent->TPM: tpm2_pcrread -TPM->attester_agent: Values of PCRs quoted +TPM->attester_agent: Values of quoted PCRs attester_agent<-attester_agent: Collect IMA log attester_agent->verifier: Quote, PCRs, IMA log verifier->verifier: Verfiy quote diff --git a/docs/protocols/remote_attestation.svg b/docs/protocols/remote_attestation.svg index 8aad0e5..ab312e7 100644 --- a/docs/protocols/remote_attestation.svg +++ b/docs/protocols/remote_attestation.svg @@ -1 +1 @@ -PlatformTPMTPMAttesterAgentAttesterAgentVerifierVerifierJoin ServiceJoin Serviceloop1GET /api/quote: PCRs, nonce2Load EK3(EK_handle, EK_pub)4Load AK5(AK_handle, AK_pub)6tpm2_quote (PCRs, nonce)7Quote8tpm2_pcrread9Values of PCRs quoted10Collect IMA log11Quote, PCRs, IMA log12Verfiy quote13Veryfy IMA log against the whitelistif Verification fails14Notify the failure15stop RA16continue RA17Store the failure event18Notify the event \ No newline at end of file +PlatformTPMTPMAttesterAgentAttesterAgentVerifierVerifierJoin ServiceJoin Serviceloop1GET /api/quote: PCRs, nonce2Load EK3(EK_handle, EK_pub)4Load AK5(AK_handle, AK_pub)6tpm2_quote (PCRs, nonce)7Quote8tpm2_pcrread9Values of quoted PCRs10Collect IMA log11Quote, PCRs, IMA log12Verfiy quote13Veryfy IMA log against the whitelistif Verification fails14Notify the failure15stop RA16continue RA17Store the failure event18Notify the event \ No newline at end of file