google / go-sev-guest

go-sev-guest offers a library to wrap the /dev/sev-guest device in Linux, as well as a library for attestation verification of fundamental components of an attestation report.
Apache License 2.0
46 stars 19 forks source link

Remove KDS clock skew when KDS back-dates certs #45

Closed deeglaze closed 1 year ago

deeglaze commented 1 year ago

I reported the issue that https://github.com/google/go-sev-guest/pull/44 works around to AMD. They said they'll change KDS's behavior, but it may take a few months given everything else going on. Once the back-dating is in, we shouldn't need the skew behavior in PR44. We should keep the API signature changes though.