Skip to content

Add IDK_S PTA - #1026

Open
Sangho Lee (sangho2) wants to merge 13 commits into
mainfrom
sanghle/optee/idks_pta
Open

Sangho Lee (sangho2) wants to merge 13 commits into
mainfrom
sanghle/optee/idks_pta

Conversation

@sangho2

@sangho2 Sangho Lee (sangho2) commented Jul 13, 2026

Copy link
Copy Markdown
Contributor

This PR introduces the IDK_S PTA. It provides one method which endorses TA-provided data with a flat structure signed by an IDK_S key. A wire format is MAGIC || VERSION || TA_DATA_LEN || TA_DATA || TA_UUID || TA_SVN || TA_DIGEST || TA_DYNAMIC || DEBUG || ISOLATION_SOLUTION || TA_SIGNING_CERT_LEN || TA_SIGNING_CERT_DER || SIGNATURE, where SIGNATURE covers all preceding bytes, and integers are UUID are little-endian.

@sangho2 Sangho Lee (sangho2) added the discussion Open questions label Jul 13, 2026
@sangho2
Sangho Lee (sangho2) force-pushed the sanghle/optee/idks_pta branch 2 times, most recently from 91e4c3a to 205a633 Compare July 14, 2026 00:14
@sangho2 Sangho Lee (sangho2) changed the title [DRAFT] IDK_S PTA [DRAFT] Add IDK_S PTA Jul 14, 2026
@sangho2
Sangho Lee (sangho2) force-pushed the sanghle/optee/idks_pta branch 4 times, most recently from e5a3e08 to 65a67fb Compare July 14, 2026 20:01
@sangho2 Sangho Lee (sangho2) changed the title [DRAFT] Add IDK_S PTA [DRAFT] IDK_S PTA Jul 14, 2026
@sangho2
Sangho Lee (sangho2) force-pushed the sanghle/lvbs/idk branch 3 times, most recently from 300e832 to 1cb91e6 Compare July 22, 2026 16:11
Comment thread litebox_shim_optee/src/idk.rs
@sangho2 Sangho Lee (sangho2) added the must-not-merge:prototype An experimental/proof-of-concept PR that must not be merged. label Jul 22, 2026
@sangho2
Sangho Lee (sangho2) force-pushed the sanghle/optee/idks_pta branch 2 times, most recently from bdd2a3a to 03cf03e Compare July 23, 2026 15:25
@sangho2
Sangho Lee (sangho2) force-pushed the sanghle/lvbs/idk branch 2 times, most recently from b1df4fd to 81667ad Compare July 24, 2026 16:52
Base automatically changed from sanghle/lvbs/idk to main July 24, 2026 17:13
@sangho2 Sangho Lee (sangho2) changed the title [DRAFT] IDK_S PTA Add IDK_S PTA Aug 3, 2026
@sangho2
Sangho Lee (sangho2) marked this pull request as ready for review August 3, 2026 17:26
@sangho2

Sangho Lee (sangho2) commented Aug 14, 2026

Copy link
Copy Markdown
Contributor Author

Prototyped the KeyIso claim structure as well.

Comment thread litebox_shim_optee/src/idk.rs Fixed
Comment thread litebox_shim_optee/src/idk.rs Fixed
@sangho2
Sangho Lee (sangho2) force-pushed the sanghle/optee/idks_pta branch 2 times, most recently from 10a2860 to 44c7587 Compare August 18, 2026 18:57
@sangho2

Sangho Lee (sangho2) commented Aug 19, 2026

Copy link
Copy Markdown
Contributor Author

@sangho2 Sangho Lee (sangho2) added the must-not-merge:blocked-on-other-changes Other changes/PRs to be handled first. Label not needed for non-main changes. label Aug 31, 2026
@sangho2 Sangho Lee (sangho2) removed the must-not-merge:blocked-on-other-changes Other changes/PRs to be handled first. Label not needed for non-main changes. label Sep 14, 2026
@sangho2
Sangho Lee (sangho2) marked this pull request as draft September 14, 2026 17:01
@sangho2 Sangho Lee (sangho2) removed the discussion Open questions label Sep 14, 2026
@sangho2
Sangho Lee (sangho2) marked this pull request as ready for review September 14, 2026 19:53
@sangho2

Copy link
Copy Markdown
Contributor Author

TA_SIGNING_CERT_LEN and TA_SIGNING_CERT_DER are technically redundant if a TA is embedded because it isn't signed. However, for now, we do not make them optional.

@github-actions

Copy link
Copy Markdown

🤖 SemverChecks 🤖 No breaking API changes detected

Note: this does not mean API is unchanged, or even that there are no breaking changes; simply, none of the detections triggered.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants