Automata TCB Eval DAO

Summary

The TcbEvalDao contract manages onchain storage and retrieval of Intel TCB Evaluation Data Numbers. This data provides a list of actively supported TCB evaluation data numbers for SGX and TDX platforms, which are used to determine the TCB recovery event dates and support both "early" and "standard" TCB evaluation policies. The contract provides methods to upsert and query TCB evaluation data with signature verification against Intel's TCB Signing Certificate.

Click here to learn more about Intel TCB Recovery Events.

Methods

getTcbEvaluationObject

function getTcbEvaluationObject(TcbId id) external view returns (TcbEvalJsonObj memory tcbEvalObj)

Queries the full TCB Evaluation Data JSON Object for the given TEE type.

Parameters:

• id (TcbId): TCB ID - TcbId.SGX or TcbId.TDX

Returns:

• tcbEvalObj (TcbEvalJsonObj): The full TCB Evaluation Data JSON Object with signature

getTcbEvaluationDataNumbers

function getTcbEvaluationDataNumbers(TcbId id) external view returns (uint256[] memory tcbEvalDataNumbers)

Queries the TCB Evaluation Data Numbers for the given TEE type.

Parameters:

• id (TcbId): TCB ID - TcbId.SGX or TcbId.TDX

Returns:

• tcbEvalDataNumbers (uint256[]): Array of actively supported TCB Evaluation Data Numbers

early

function early(TcbId id) external view returns (uint32 tcbEvaluationNumber)

Returns the "early" TCB Evaluation Data Number, which is the highest (most recent) evaluation number available.

Parameters:

• id (TcbId): TCB ID - TcbId.SGX or TcbId.TDX

Returns:

• tcbEvaluationNumber (uint32): The earliest (highest) TCB Evaluation Data Number

standard

function standard(TcbId id) external view returns (uint32 tcbEvaluationNumber)

Returns the "standard" TCB Evaluation Data Number, which is the highest evaluation number that is at least 12 months after the TCB recovery event.

Parameters:

• id (TcbId): TCB ID - TcbId.SGX or TcbId.TDX

Returns:

• tcbEvaluationNumber (uint32): The standard TCB Evaluation Data Number (highest number that is at least 12 months after recovery event)

upsertTcbEvaluationData

function upsertTcbEvaluationData(TcbEvalJsonObj calldata tcbEvalObj) external returns (bytes32 attestationId)

Upserts (inserts or updates) TCB Evaluation Data Numbers on-chain with signature verification and rollback protection.

Parameters:

• tcbEvalObj (TcbEvalJsonObj): The TCB Evaluation Data JSON string and signature

Returns:

• attestationId (bytes32): The attestation ID returned by the resolver

getTcbEvalIssuerChain

function getTcbEvalIssuerChain() external view returns (bytes memory signingCert, bytes memory rootCert)

Fetches the certificate chain used to sign TCB Evaluation Data.

Returns:

• signingCert (bytes): DER encoded Intel TCB Signing Certificate
• rootCert (bytes): DER encoded Intel SGX Root CA

Reverts