While basic firmware verification can be accomplished using standardized GET_MEASUREMENTS routines, deep attestation requirements look for structured validation metadata. SPDM 1.3 introduces the Measurement Extension Log (MEL) via GET_MEASUREMENT_EXTENSION_LOG, allowing responders to expose a detailed log of events that led to a specific measurement state.
To maintain our value proposition as a powerful minimalist requester, we need the capability to securely request and stream these logs for host-side evaluation.
What to Add
- Capabilities Flag: Update the capability exchange sequence to negotiate
MEL_CAP.
- Command Formulation: Implement the
GET_MEASUREMENT_EXTENSION_LOG request frame handling.
- Zero-Malloc Parser: Implement an iterative, block-by-block parsing callback for incoming MEL responses, ensuring that the host application can process logs of arbitrary length without storing the entire log array in SRAM.
While basic firmware verification can be accomplished using standardized
GET_MEASUREMENTSroutines, deep attestation requirements look for structured validation metadata. SPDM 1.3 introduces the Measurement Extension Log (MEL) viaGET_MEASUREMENT_EXTENSION_LOG, allowing responders to expose a detailed log of events that led to a specific measurement state.To maintain our value proposition as a powerful minimalist requester, we need the capability to securely request and stream these logs for host-side evaluation.
What to Add
MEL_CAP.GET_MEASUREMENT_EXTENSION_LOGrequest frame handling.