Dstack-TEE / Dstack-TEE/dstack

DIP: Self-Describing Hash Format for Intel DCAP reportdata

Abierto
#330 1 comentario 0 reacciones 0 asignados Ver en GitHub
proposal
Lenguaje dominante
Rust
Estrellas
544
Forks
96
Merge medio
17 h 57 min
PR fusionados (30 d)
117

Descripción

We propose a new standard format for encoding hashes in Intel DCAP attestation `reportdata`, which is limited to 64 bytes. The format is:

```
::
```

- Purpose: short human-readable identifier (≤10 chars).
- Algo: algorithm name (e.g., sha-256).
- Digest: Base64url-encoded hash, without padding.

This format is inspired by existing practices (ni://, SRI, Docker digests), but tailored for the strict 64-byte size constraint. It is primarily intended for SHA-256, since longer digests would overflow.

Advantages:
- Self-describing (algorithm embedded).
- Compact (Base64url shorter than hex).
- Domain separation via purpose prefix.
- Reusable tooling: can leverage existing ni:// and SRI libraries for serialization/parsing.

PR: #331

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.