Confidential VM Quote Processing Server

A Node.js web service for processing Intel SGX/TDX and AMD SEV-SNP quotes. It validates remote attestation reports, extracts platform identifiers, and issues signed JWT tokens for verified confidential VMs.

Overview

This service acts as a trust anchor for Confidential Computing workflows. It accepts raw hardware quotes (hex encoded), validates them using the appropriate internal tool (attester for Intel or amd-verifier for AMD), extracts a unique hardware identifier (Chip ID or PPID), checks it against a whitelist of verified providers, and returns a signed JWT.

Features

• Multi-Architecture Support:
  • Intel SGX & TDX: Validates DCAP quotes via Intel's QVL.
  • AMD SEV-SNP: Validates attestation reports via amd-verifier.
• Automatic Detection: Automatically determines the architecture based on the quote structure and length.
• Hardware Identity Extraction:
  • Extracts PPID (Platform Provisioning ID) for Intel quotes.
  • Extracts Chip ID for AMD SEV-SNP reports.
• Whitelist Verification: Checks hardware IDs against a strict whitelist of approved machines (sourced from the Proof of Cloud database).
• JWT Generation: Issues RS256-signed JWT tokens containing the machine ID, label, and quote hash.

API Endpoints

POST /get_jwt

Processes an SGX or TDX quote and returns verification results.

Request Body:

{
  "quote": "hex_encoded_sgx_or_tdx_quote",
  "nonces": ["..."],      // Optional: Required if MULTISIG_MODE is true
  "partial_sigs": ["..."] // Optional: Required if MULTISIG_MODE is true
}

Response:

{
  "machineId": "truncated_sha256_of_ppid", 
  "label": "machine label",
  "jwt": "rs256_signed_jwt_token"  // OR partial signature data in Multisig Mode
}

POST /verify_token

Verifies JWT token generated for the provided quote.

Request Body:

{
  "quote": "hex_encoded_sgx_or_tdx_quote",
  "jwt": "hex_encoded_sgx_or_tdx_quote"
}

Response:

{
  "valid": "true|false", 
  "keyId": "key id of the signer", 
  "label": "machine label",
}

GET /

Health check endpoint that returns service status.

How to run

Standard (Single Sig, HTTP)

sudo docker run \
    -d \
    --rm \
    -p 8080:8080 \
    ghcr.io/proofofcloud/trust-server:sha-<sha_hash>

Secure Mode (Single Sig, HTTPS)

To run in production with HTTPS, you must mount your certificates into the container and set the environment variables.

1. Prepare Certificates: Ensure you have your privkey.pem and fullchain.pem.
2. Run Container:

sudo docker run \
    -d \
    --rm \
    -p 443:8080 \
    -e HTTPS_ENABLED=true \
    -e HTTPS_KEY_PATH=/certs/privkey.pem \
    -e HTTPS_CERT_PATH=/certs/fullchain.pem \
    -v /path/to/your/certs:/certs:ro \
    ghcr.io/proofofcloud/trust-server:sha-<sha_hash>

Multisig Mode

To run in Multisig mode (with or without HTTPS), add the MULTISIG_MODE environment variable.

sudo docker run \
    -d \
    --rm \
    -p 8080:8080 \
    -e MULTISIG_MODE=true \
    ghcr.io/proofofcloud/trust-server:sha-<sha_hash>