Other
Reference Values
These are the values that we check attestation evidence against. They are derived from the firmware, guest kernel and disk images that production currently runs, and they are published together as one release. The release contains firmware measurements, dm-verity disk hashes, the root keys of the TEE vendors, and SEV-SNP launch measurements.
The reference repositories will be open source
When we reach general availability, we will publish the repositories that produce these values. Anyone will then be able to reproduce the builds and check the measurements on their own.
Loading reference values…