@reclaimprotocol/attestor-core/lib/server/utils/sev-snp/gcp.d.ts

<div> <div> <img src="https://raw.githubusercontent.com/reclaimprotocol/.github/main/assets/banners/Attestor-Core.png" /> </div> </div>

/**
 * GCP SEV-SNP leg: go-tpm-tools Attestation. AK cert chains to the Google vTPM
 * root; the SEV report binds sha512(akPub||bound) (anti-splice); the AK-signed
 * TPM2 quote (SHA-256 bank) over PCRs proves PCR 8 (app) + PCR 11 (base).
 * Ports go-tpm-tools quote.Verify + the report_data binding.
 */
import { type SevSnpEnvelope } from '../../../server/utils/sev-snp/verify.ts';
/**
 * Verifies the GCP leg: AK->Google root, SEV report bound to sha512(akPub||bound),
 * AK-signed SHA-256 quote (nonce sha256(bound)) -> PCRs, PCR8 proves the app hash.
 */
export declare function verifyGcpLeg(env: SevSnpEnvelope, bound: Buffer, now: Date): {
    app: string;
    base: string;
};