Skip to content

feat: CoRIM v0.1.0 — Concise Reference Integrity Manifest (Rust)#4

Closed
mingweishih wants to merge 1 commit intomainfrom
initial-release
Closed

feat: CoRIM v0.1.0 — Concise Reference Integrity Manifest (Rust)#4
mingweishih wants to merge 1 commit intomainfrom
initial-release

Conversation

@mingweishih
Copy link
Copy Markdown
Contributor

Rust implementation of draft-ietf-rats-corim-10 for Remote Attestation (RATS) Endorsements and Reference Values.

Library (corim):

  • Full CDDL coverage: corim-map, CoMID, CoTL, all 9 triple types, measurement-values-map with all fields
  • Signed CoRIM (feat: CoRIM v0.1.0 — Concise Reference Integrity Manifest (Rust) #6.18 / COSE_Sign1): decode, validate, construct with attached and detached payload modes (no crypto dependency)
  • CWT Claims (RFC 8392/9597) and protected header extraction
  • CoSWID (RFC 9393): structured types with co-constraint validation
  • Zero-dependency CBOR: in-house encoder/decoder, deterministic encoding per RFC 8949 §4.2.1
  • Builder API: ComidBuilder, CotlBuilder, CorimBuilder, SignedCorimBuilder with fluent interface
  • Validation & appraisal: reference value matching (§9.3), conditional endorsement series (§9.3.4)
  • Optional JSON serialization (feature-gated)
  • 631 tests, 0 clippy warnings, 0 unsafe blocks

Proc-macro crate (corim-macros):

  • CborSerialize / CborDeserialize derives for integer-keyed CBOR maps

CLI tool (corim-cli):

  • Validates and inspects unsigned and signed CoRIM documents
  • Auto-detects tag 501 (unsigned) vs tag 18 (signed)
  • Text and JSON output formats

Rust implementation of draft-ietf-rats-corim-10 for Remote Attestation
(RATS) Endorsements and Reference Values.

Library (corim):
- Full CDDL coverage: corim-map, CoMID, CoTL, all 9 triple types,
  measurement-values-map with all fields
- Signed CoRIM (#6.18 / COSE_Sign1): decode, validate, construct
  with attached and detached payload modes (no crypto dependency)
- CWT Claims (RFC 8392/9597) and protected header extraction
- CoSWID (RFC 9393): structured types with co-constraint validation
- Zero-dependency CBOR: in-house encoder/decoder, deterministic
  encoding per RFC 8949 §4.2.1
- Builder API: ComidBuilder, CotlBuilder, CorimBuilder,
  SignedCorimBuilder with fluent interface
- Validation & appraisal: reference value matching (§9.3),
  conditional endorsement series (§9.3.4)
- Optional JSON serialization (feature-gated)
- 631 tests, 0 clippy warnings, 0 unsafe blocks

Proc-macro crate (corim-macros):
- CborSerialize / CborDeserialize derives for integer-keyed CBOR maps

CLI tool (corim-cli):
- Validates and inspects unsigned and signed CoRIM documents
- Auto-detects tag 501 (unsigned) vs tag 18 (signed)
- Text and JSON output formats
@mingweishih mingweishih deleted the initial-release branch April 16, 2026 23:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant