Dstack-TEE / Dstack-TEE/dstack
DIP: Self-Describing Hash Format for Intel DCAP reportdata
- 主要言語
- Rust
- スター
- 544
- フォーク
- 96
- 平均マージ
- 17時間 57分
- マージ済み PR(30日)
- 117
説明
We propose a new standard format for encoding hashes in Intel DCAP attestation `reportdata`, which is limited to 64 bytes. The format is:
```
::
```
- Purpose: short human-readable identifier (≤10 chars).
- Algo: algorithm name (e.g., sha-256).
- Digest: Base64url-encoded hash, without padding.
This format is inspired by existing practices (ni://, SRI, Docker digests), but tailored for the strict 64-byte size constraint. It is primarily intended for SHA-256, since longer digests would overflow.
Advantages:
- Self-describing (algorithm embedded).
- Compact (Base64url shorter than hex).
- Domain separation via purpose prefix.
- Reusable tooling: can leverage existing ni:// and SRI libraries for serialization/parsing.
PR: #331
コントリビューションガイド
評価
この issue はまだ評価されていません。