Dstack-TEE / Dstack-TEE/dstack

DIP: Self-Describing Hash Format for Intel DCAP reportdata

未关闭
#330 1 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
proposal
主要语言
Rust
星标
544
派生
96
平均合并
23 小时 40 分钟
30 天内合并 PR
126

描述

We propose a new standard format for encoding hashes in Intel DCAP attestation `reportdata`, which is limited to 64 bytes. The format is:

```
::
```

- Purpose: short human-readable identifier (≤10 chars).
- Algo: algorithm name (e.g., sha-256).
- Digest: Base64url-encoded hash, without padding.

This format is inspired by existing practices (ni://, SRI, Docker digests), but tailored for the strict 64-byte size constraint. It is primarily intended for SHA-256, since longer digests would overflow.

Advantages:
- Self-describing (algorithm embedded).
- Compact (Base64url shorter than hex).
- Domain separation via purpose prefix.
- Reusable tooling: can leverage existing ni:// and SRI libraries for serialization/parsing.

PR: #331

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。