Skip to content

igvm_defs, igvm: introduce corim measurement header#99

Open
chris-oo wants to merge 10 commits intomicrosoft:mainfrom
chris-oo:corim-header
Open

igvm_defs, igvm: introduce corim measurement header#99
chris-oo wants to merge 10 commits intomicrosoft:mainfrom
chris-oo:corim-header

Conversation

@chris-oo
Copy link
Copy Markdown
Member

@chris-oo chris-oo commented Nov 11, 2025

Introduce a CoRIM document and CoRIM signature header to allow CoRIM payloads to be described for a given platform. This is the bare-minimum support to start proving out CoRIM support for IGVM files, with more support tracked by #115.

/// A structure defining a CoRIM CBOR payload for a given platform. TODO: rename
/// to remove measurement?
///
/// The payload described by this header is a CBOR CoRIM payload. There may only
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Would be good to be have a similar level of detail here as below, pointing to section 4.1 of the spec, and explicitly calling it out as a tagged unsigned CoRIM map.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

How does the verbage look on the most recent iteration?

Copy link
Copy Markdown

@ionut-arm ionut-arm Mar 31, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I can't tell how much the wording has changed, but it still seems useful to add a short paragraph similar to what's on IGVM_VHS_CORIM_SIGNATURE, maybe something like:

This header describes a `tagged-unsigned-corim-map` as defined in section 4.1 of https://datatracker.ietf.org/doc/draft-ietf-rats-corim/.

(assuming here that the tagged-unsigned-corim-map is the one you're expecting)

Not a critical detail, of course, mostly for ease of traversing docs.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nope great feedback, I'll include a link for the document itself. We did for the signature, but good to be consistent.

@mingweishih
Copy link
Copy Markdown

CoRIM spec does not seem to support detached mode —- waiting for confirmation ietf-rats-wg/draft-ietf-rats-corim#514

@mingweishih
Copy link
Copy Markdown

There is a proposal to add detached mode support: ietf-rats-wg/draft-ietf-rats-corim#520

@chris-oo chris-oo changed the title [WIP] igvm_defs: introduce corim measurement header igvm_defs, igvm: introduce corim measurement header Mar 24, 2026
@chris-oo chris-oo marked this pull request as ready for review March 24, 2026 00:19
@chris-oo chris-oo requested a review from a team as a code owner March 24, 2026 00:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants