Add attestation crate

[ameba23]

This adds a crate with the attestation generation, verification, and measurement handling logic refactored out of attested-tls-proxy.

We may not need the dcap module - as this can be handled internally by ra-tls. But because the dcap stuff is also internally used by the azure attestation, we need to keep it in for now.

Paired PR

This pairs with flashbots/attested-tls-proxy#150 which uses this branch for attestation crate, to avoid duplicating the code.

Eventually we will probably not need that repo anymore, but as long as it is still being used by Buildernet we have to maintain it and it makes sense for the attestation code to be in just one place.

Github workflow for testing, clippy and formatting

I added a workflow for testing. I think this is an opinionated way of doing things, and maybe doesn't belong in this PR. But i wanted to see it pass before putting this up for review. So we can always switch to another CI script in a followup afterwards.

Crypto provider for rustls

When used as a library we have default-features = false for tokio-rustls, to allow the caller to choose crypto provider. As a dev-dependency we use the default provider for testing.

[0x416e746f6e]

question:

can this (very hard to read and git-diff) one-liner JSON be replaced with more easy to review YAML like:

root_ca_crl: |-
  308201203081c8020101300a06082a8648ce3d0403023068311a301806035504030c11496e74656c2053475820526f6f74204341311a3018060355040a0c11496e74656c20436f72706f726174696f6e3114301206035504070c0b53616e746120436c617261310b300906035504080c024341310b3009060355040613025553170d3235303332303131323135375a170d3236303430333131323135375aa02f302d300a0603551d140403020101301f0603551d2304183016801422650cd65a9d3489f383b49552bf501b392706ac300a06082a8648ce3d0403020347003044022030c9fce1438da0a94e4fffdd46c9650e393be6e5a7862d4e4e73527932d04af302206539efe3f734c3d7df20d9dfc4630e1c7ff0439a0f8ece101f15b5eaff9b4f33

pck_crl: |-
  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

pck_crl_issuer_chain: |-
  -----BEGIN CERTIFICATE-----
  MIICljCCAj2gAwIBAgIVAJVvXc29G+HpQEnJ1PQzzgFXC95UMAoGCCqGSM49BAMC
  MGgxGjAYBgNVBAMMEUludGVsIFNHWCBSb290IENBMRowGAYDVQQKDBFJbnRlbCBD
  b3Jwb3JhdGlvbjEUMBIGA1UEBwwLU2FudGEgQ2xhcmExCzAJBgNVBAgMAkNBMQsw
  CQYDVQQGEwJVUzAeFw0xODA1MjExMDUwMTBaFw0zMzA1MjExMDUwMTBaMHAxIjAg
  BgNVBAMMGUludGVsIFNHWCBQQ0sgUGxhdGZvcm0gQ0ExGjAYBgNVBAoMEUludGVs
  IENvcnBvcmF0aW9uMRQwEgYDVQQHDAtTYW50YSBDbGFyYTELMAkGA1UECAwCQ0Ex
  CzAJBgNVBAYTAlVTMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAENSB/7t21lXSO
  2Cuzpxw74eJB72EyDGgW5rXCtx2tVTLq6hKk6z+UiRZCnqR7psOvgqFeSxlmTlJl
  eTmi2WYz3qOBuzCBuDAfBgNVHSMEGDAWgBQiZQzWWp00ifODtJVSv1AbOScGrDBS
  BgNVHR8ESzBJMEegRaBDhkFodHRwczovL2NlcnRpZmljYXRlcy50cnVzdGVkc2Vy
  dmljZXMuaW50ZWwuY29tL0ludGVsU0dYUm9vdENBLmRlcjAdBgNVHQ4EFgQUlW9d
  zb0b4elAScnU9DPOAVcL3lQwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB
  Af8CAQAwCgYIKoZIzj0EAwIDRwAwRAIgXsVki0w+i6VYGW3UF/22uaXe0YJDj1Ue
  nA+TjD1ai5cCICYb1SAmD5xkfTVpvo4UoyiSYxrDWLmUR4CI9NKyfPN+
  -----END CERTIFICATE-----
  -----BEGIN CERTIFICATE-----
  MIICjzCCAjSgAwIBAgIUImUM1lqdNInzg7SVUr9QGzknBqwwCgYIKoZIzj0EAwIw
  aDEaMBgGA1UEAwwRSW50ZWwgU0dYIFJvb3QgQ0ExGjAYBgNVBAoMEUludGVsIENv
  cnBvcmF0aW9uMRQwEgYDVQQHDAtTYW50YSBDbGFyYTELMAkGA1UECAwCQ0ExCzAJ
  BgNVBAYTAlVTMB4XDTE4MDUyMTEwNDUxMFoXDTQ5MTIzMTIzNTk1OVowaDEaMBgG
  A1UEAwwRSW50ZWwgU0dYIFJvb3QgQ0ExGjAYBgNVBAoMEUludGVsIENvcnBvcmF0
  aW9uMRQwEgYDVQQHDAtTYW50YSBDbGFyYTELMAkGA1UECAwCQ0ExCzAJBgNVBAYT
  AlVTMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEC6nEwMDIYZOj/iPWsCzaEKi7
  1OiOSLRFhWGjbnBVJfVnkY4u3IjkDYYL0MxO4mqsyYjlBalTVYxFP2sJBK5zlKOB
  uzCBuDAfBgNVHSMEGDAWgBQiZQzWWp00ifODtJVSv1AbOScGrDBSBgNVHR8ESzBJ
  MEegRaBDhkFodHRwczovL2NlcnRpZmljYXRlcy50cnVzdGVkc2VydmljZXMuaW50
  ZWwuY29tL0ludGVsU0dYUm9vdENBLmRlcjAdBgNVHQ4EFgQUImUM1lqdNInzg7SV
  Ur9QGzknBqwwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYBAf8CAQEwCgYI
  KoZIzj0EAwIDSQAwRgIhAOW/5QkR+S9CiSDcNoowLuPRLsWGf/Yi7GSX94BgwTwg
  AiEA4J0lrHoMs+Xo5o/sX6O9QWxHRAvZUGOdRQ7cvqRXaqI=
  -----END CERTIFICATE-----

tcb_info_signature: |-
  bdd7c459dbae4634650fd5f7a6bab2f89f4c081e043ecd76dda8dd00362732b889ad8dcdb93daa18cdb5cda6d5aa9092908f5465863d390ebe23da7dd46a5f2f

tcb_info_issuer_chain: |-
  -----BEGIN CERTIFICATE-----
  MIICjTCCAjKgAwIBAgIUfjiC1ftVKUpASY5FhAPpFJG99FUwCgYIKoZIzj0EAwIw
  aDEaMBgGA1UEAwwRSW50ZWwgU0dYIFJvb3QgQ0ExGjAYBgNVBAoMEUludGVsIENv
  cnBvcmF0aW9uMRQwEgYDVQQHDAtTYW50YSBDbGFyYTELMAkGA1UECAwCQ0ExCzAJ
  BgNVBAYTAlVTMB4XDTI1MDUwNjA5MjUwMFoXDTMyMDUwNjA5MjUwMFowbDEeMBwG
  A1UEAwwVSW50ZWwgU0dYIFRDQiBTaWduaW5nMRowGAYDVQQKDBFJbnRlbCBDb3Jw
  b3JhdGlvbjEUMBIGA1UEBwwLU2FudGEgQ2xhcmExCzAJBgNVBAgMAkNBMQswCQYD
  VQQGEwJVUzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABENFG8xzydWRfK92bmGv
  P+mAh91PEyV7Jh6FGJd5ndE9aBH7R3E4A7ubrlh/zN3C4xvpoouGlirMba+W2lju
  ypajgbUwgbIwHwYDVR0jBBgwFoAUImUM1lqdNInzg7SVUr9QGzknBqwwUgYDVR0f
  BEswSTBHoEWgQ4ZBaHR0cHM6Ly9jZXJ0aWZpY2F0ZXMudHJ1c3RlZHNlcnZpY2Vz
  LmludGVsLmNvbS9JbnRlbFNHWFJvb3RDQS5kZXIwHQYDVR0OBBYEFH44gtX7VSlK
  QEmORYQD6RSRvfRVMA4GA1UdDwEB/wQEAwIGwDAMBgNVHRMBAf8EAjAAMAoGCCqG
  SM49BAMCA0kAMEYCIQDdmmRuAo3qCO8TC1IoJMITAoOEw4dlgEBHzSz1TuMSTAIh
  AKVTqOkt59+co0O3m3hC+v5Fb00FjYWcgeu3EijOULo5
  -----END CERTIFICATE-----
  -----BEGIN CERTIFICATE-----
  MIICjzCCAjSgAwIBAgIUImUM1lqdNInzg7SVUr9QGzknBqwwCgYIKoZIzj0EAwIw
  aDEaMBgGA1UEAwwRSW50ZWwgU0dYIFJvb3QgQ0ExGjAYBgNVBAoMEUludGVsIENv
  cnBvcmF0aW9uMRQwEgYDVQQHDAtTYW50YSBDbGFyYTELMAkGA1UECAwCQ0ExCzAJ
  BgNVBAYTAlVTMB4XDTE4MDUyMTEwNDUxMFoXDTQ5MTIzMTIzNTk1OVowaDEaMBgG
  A1UEAwwRSW50ZWwgU0dYIFJvb3QgQ0ExGjAYBgNVBAoMEUludGVsIENvcnBvcmF0
  aW9uMRQwEgYDVQQHDAtTYW50YSBDbGFyYTELMAkGA1UECAwCQ0ExCzAJBgNVBAYT
  AlVTMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEC6nEwMDIYZOj/iPWsCzaEKi7
  1OiOSLRFhWGjbnBVJfVnkY4u3IjkDYYL0MxO4mqsyYjlBalTVYxFP2sJBK5zlKOB
  uzCBuDAfBgNVHSMEGDAWgBQiZQzWWp00ifODtJVSv1AbOScGrDBSBgNVHR8ESzBJ
  MEegRaBDhkFodHRwczovL2NlcnRpZmljYXRlcy50cnVzdGVkc2VydmljZXMuaW50
  ZWwuY29tL0ludGVsU0dYUm9vdENBLmRlcjAdBgNVHQ4EFgQUImUM1lqdNInzg7SV
  Ur9QGzknBqwwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYBAf8CAQEwCgYI
  KoZIzj0EAwIDSQAwRgIhAOW/5QkR+S9CiSDcNoowLuPRLsWGf/Yi7GSX94BgwTwg
  AiEA4J0lrHoMs+Xo5o/sX6O9QWxHRAvZUGOdRQ7cvqRXaqI=
  -----END CERTIFICATE-----

tcb_info: |-
  {
      "id": "TDX",
      "version": 3,
      "issueDate": "2026-02-18T10:58:51Z",
      "nextUpdate": "2026-03-20T10:58:51Z",
      "fmspc": "90C06F000000",
      "pceId": "0000",
      "tcbType": 0,
      "tcbEvaluationDataNumber": 18,
      "tdxModule": {
          "mrsigner": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
          "attributes": "0000000000000000",
          "attributesMask": "FFFFFFFFFFFFFFFF"
      },
      "tdxModuleIdentities": [
          {
              "id": "TDX_03",
              "mrsigner": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
              "attributes": "0000000000000000",
              "attributesMask": "FFFFFFFFFFFFFFFF",
              "tcbLevels": [
                  {
                      "tcb": {
                          "isvsvn": 3
                      },
                      "tcbDate": "2024-11-13T00:00:00Z",
                      "tcbStatus": "UpToDate"
                  }
              ]
          },
          {
              "id": "TDX_01",
              "mrsigner": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
              "attributes": "0000000000000000",
              "attributesMask": "FFFFFFFFFFFFFFFF",
              "tcbLevels": [
                  {
                      "tcb": {
                          "isvsvn": 6
                      },
                      "tcbDate": "2024-11-13T00:00:00Z",
                      "tcbStatus": "UpToDate"
                  },
                  {
                      "tcb": {
                          "isvsvn": 4
                      },
                      "tcbDate": "2024-03-13T00:00:00Z",
                      "tcbStatus": "OutOfDate",
                      "advisoryIDs": [
                          "INTEL-SA-01036",
                          "INTEL-SA-01099"
                      ]
                  },
                  {
                      "tcb": {
                          "isvsvn": 2
                      },
                      "tcbDate": "2023-08-09T00:00:00Z",
                      "tcbStatus": "OutOfDate",
                      "advisoryIDs": [
                          "INTEL-SA-01036",
                          "INTEL-SA-01099"
                      ]
                  }
              ]
          }
      ],
      "tcbLevels": [
          {
              "tcb": {
                  "sgxtcbcomponents": [
                      {
                          "svn": 3,
                          "category": "BIOS",
                          "type": "Early Microcode Update"
                      },
                      {
                          "svn": 3,
                          "category": "OS/VMM",
                          "type": "SGX Late Microcode Update"
                      },
                      {
                          "svn": 2,
                          "category": "OS/VMM",
                          "type": "TXT SINIT"
                      },
                      {
                          "svn": 2,
                          "category": "BIOS"
                      },
                      {
                          "svn": 4,
                          "category": "BIOS"
                      },
                      {
                          "svn": 1,
                          "category": "BIOS"
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 5,
                          "category": "OS/VMM",
                          "type": "SEAMLDR ACM"
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      }
                  ],
                  "pcesvn": 13,
                  "tdxtcbcomponents": [
                      {
                          "svn": 5,
                          "category": "OS/VMM",
                          "type": "TDX Module"
                      },
                      {
                          "svn": 0,
                          "category": "OS/VMM",
                          "type": "TDX Module"
                      },
                      {
                          "svn": 3,
                          "category": "OS/VMM",
                          "type": "TDX Late Microcode Update"
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      }
                  ]
              },
              "tcbDate": "2024-11-13T00:00:00Z",
              "tcbStatus": "UpToDate"
          },
          {
              "tcb": {
                  "sgxtcbcomponents": [
                      {
                          "svn": 2,
                          "category": "BIOS",
                          "type": "Early Microcode Update"
                      },
                      {
                          "svn": 2,
                          "category": "OS/VMM",
                          "type": "SGX Late Microcode Update"
                      },
                      {
                          "svn": 2,
                          "category": "OS/VMM",
                          "type": "TXT SINIT"
                      },
                      {
                          "svn": 2,
                          "category": "BIOS"
                      },
                      {
                          "svn": 3,
                          "category": "BIOS"
                      },
                      {
                          "svn": 1,
                          "category": "BIOS"
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 5,
                          "category": "OS/VMM",
                          "type": "SEAMLDR ACM"
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      }
                  ],
                  "pcesvn": 13,
                  "tdxtcbcomponents": [
                      {
                          "svn": 5,
                          "category": "OS/VMM",
                          "type": "TDX Module"
                      },
                      {
                          "svn": 0,
                          "category": "OS/VMM",
                          "type": "TDX Module"
                      },
                      {
                          "svn": 2,
                          "category": "OS/VMM",
                          "type": "TDX Late Microcode Update"
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      }
                  ]
              },
              "tcbDate": "2024-03-13T00:00:00Z",
              "tcbStatus": "OutOfDate",
              "advisoryIDs": [
                  "INTEL-SA-01036",
                  "INTEL-SA-01079",
                  "INTEL-SA-01099",
                  "INTEL-SA-01103",
                  "INTEL-SA-01111"
              ]
          },
          {
              "tcb": {
                  "sgxtcbcomponents": [
                      {
                          "svn": 2,
                          "category": "BIOS",
                          "type": "Early Microcode Update"
                      },
                      {
                          "svn": 2,
                          "category": "OS/VMM",
                          "type": "SGX Late Microcode Update"
                      },
                      {
                          "svn": 2,
                          "category": "OS/VMM",
                          "type": "TXT SINIT"
                      },
                      {
                          "svn": 2,
                          "category": "BIOS"
                      },
                      {
                          "svn": 3,
                          "category": "BIOS"
                      },
                      {
                          "svn": 1,
                          "category": "BIOS"
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 5,
                          "category": "OS/VMM",
                          "type": "SEAMLDR ACM"
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      }
                  ],
                  "pcesvn": 5,
                  "tdxtcbcomponents": [
                      {
                          "svn": 5,
                          "category": "OS/VMM",
                          "type": "TDX Module"
                      },
                      {
                          "svn": 0,
                          "category": "OS/VMM",
                          "type": "TDX Module"
                      },
                      {
                          "svn": 2,
                          "category": "OS/VMM",
                          "type": "TDX Late Microcode Update"
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      },
                      {
                          "svn": 0
                      }
                  ]
              },
              "tcbDate": "2018-01-04T00:00:00Z",
              "tcbStatus": "OutOfDate",
              "advisoryIDs": [
                  "INTEL-SA-00106",
                  "INTEL-SA-00115",
                  "INTEL-SA-00135",
                  "INTEL-SA-00203",
                  "INTEL-SA-00220",
                  "INTEL-SA-00233",
                  "INTEL-SA-00270",
                  "INTEL-SA-00293",
                  "INTEL-SA-00320",
                  "INTEL-SA-00329",
                  "INTEL-SA-00381",
                  "INTEL-SA-00389",
                  "INTEL-SA-00477",
                  "INTEL-SA-00837",
                  "INTEL-SA-01036",
                  "INTEL-SA-01079",
                  "INTEL-SA-01099",
                  "INTEL-SA-01103",
                  "INTEL-SA-01111"
              ]
          }
      ]
  }

qe_identity_signature: |-
  85037e9d4dbf39bc6f7f404e29fdf920e96d9e6e6f4afd288fcbe085c59bd52f09da1c284f13bbd342f2c787b6dba3003db958a75134b136bca068272f2392bf

qe_identity_issuer_chain: |-
  -----BEGIN CERTIFICATE-----
  MIICjTCCAjKgAwIBAgIUfjiC1ftVKUpASY5FhAPpFJG99FUwCgYIKoZIzj0EAwIw
  aDEaMBgGA1UEAwwRSW50ZWwgU0dYIFJvb3QgQ0ExGjAYBgNVBAoMEUludGVsIENv
  cnBvcmF0aW9uMRQwEgYDVQQHDAtTYW50YSBDbGFyYTELMAkGA1UECAwCQ0ExCzAJ
  BgNVBAYTAlVTMB4XDTI1MDUwNjA5MjUwMFoXDTMyMDUwNjA5MjUwMFowbDEeMBwG
  A1UEAwwVSW50ZWwgU0dYIFRDQiBTaWduaW5nMRowGAYDVQQKDBFJbnRlbCBDb3Jw
  b3JhdGlvbjEUMBIGA1UEBwwLU2FudGEgQ2xhcmExCzAJBgNVBAgMAkNBMQswCQYD
  VQQGEwJVUzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABENFG8xzydWRfK92bmGv
  P+mAh91PEyV7Jh6FGJd5ndE9aBH7R3E4A7ubrlh/zN3C4xvpoouGlirMba+W2lju
  ypajgbUwgbIwHwYDVR0jBBgwFoAUImUM1lqdNInzg7SVUr9QGzknBqwwUgYDVR0f
  BEswSTBHoEWgQ4ZBaHR0cHM6Ly9jZXJ0aWZpY2F0ZXMudHJ1c3RlZHNlcnZpY2Vz
  LmludGVsLmNvbS9JbnRlbFNHWFJvb3RDQS5kZXIwHQYDVR0OBBYEFH44gtX7VSlK
  QEmORYQD6RSRvfRVMA4GA1UdDwEB/wQEAwIGwDAMBgNVHRMBAf8EAjAAMAoGCCqG
  SM49BAMCA0kAMEYCIQDdmmRuAo3qCO8TC1IoJMITAoOEw4dlgEBHzSz1TuMSTAIh
  AKVTqOkt59+co0O3m3hC+v5Fb00FjYWcgeu3EijOULo5
  -----END CERTIFICATE-----
  -----BEGIN CERTIFICATE-----
  MIICjzCCAjSgAwIBAgIUImUM1lqdNInzg7SVUr9QGzknBqwwCgYIKoZIzj0EAwIw
  aDEaMBgGA1UEAwwRSW50ZWwgU0dYIFJvb3QgQ0ExGjAYBgNVBAoMEUludGVsIENv
  cnBvcmF0aW9uMRQwEgYDVQQHDAtTYW50YSBDbGFyYTELMAkGA1UECAwCQ0ExCzAJ
  BgNVBAYTAlVTMB4XDTE4MDUyMTEwNDUxMFoXDTQ5MTIzMTIzNTk1OVowaDEaMBgG
  A1UEAwwRSW50ZWwgU0dYIFJvb3QgQ0ExGjAYBgNVBAoMEUludGVsIENvcnBvcmF0
  aW9uMRQwEgYDVQQHDAtTYW50YSBDbGFyYTELMAkGA1UECAwCQ0ExCzAJBgNVBAYT
  AlVTMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEC6nEwMDIYZOj/iPWsCzaEKi7
  1OiOSLRFhWGjbnBVJfVnkY4u3IjkDYYL0MxO4mqsyYjlBalTVYxFP2sJBK5zlKOB
  uzCBuDAfBgNVHSMEGDAWgBQiZQzWWp00ifODtJVSv1AbOScGrDBSBgNVHR8ESzBJ
  MEegRaBDhkFodHRwczovL2NlcnRpZmljYXRlcy50cnVzdGVkc2VydmljZXMuaW50
  ZWwuY29tL0ludGVsU0dYUm9vdENBLmRlcjAdBgNVHQ4EFgQUImUM1lqdNInzg7SV
  Ur9QGzknBqwwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYBAf8CAQEwCgYI
  KoZIzj0EAwIDSQAwRgIhAOW/5QkR+S9CiSDcNoowLuPRLsWGf/Yi7GSX94BgwTwg
  AiEA4J0lrHoMs+Xo5o/sX6O9QWxHRAvZUGOdRQ7cvqRXaqI=
  -----END CERTIFICATE-----

qe_identity: |-
  {
      "id": "TD_QE",
      "version": 2,
      "issueDate": "2026-02-18T10:42:15Z",
      "nextUpdate": "2026-03-20T10:42:15Z",
      "tcbEvaluationDataNumber": 18,
      "miscselect": "00000000",
      "miscselectMask": "FFFFFFFF",
      "attributes": "11000000000000000000000000000000",
      "attributesMask": "FBFFFFFFFFFFFFFF0000000000000000",
      "mrsigner": "DC9E2A7C6F948F17474E34A7FC43ED030F7C1563F1BABDDF6340C82E0E54A8C5",
      "isvprodid": 2,
      "tcbLevels": [
          {
              "tcb": {
                  "isvsvn": 4
              },
              "tcbDate": "2024-11-13T00:00:00Z",
              "tcbStatus": "UpToDate"
          }
      ]
  }

[ameba23]

Yep we could but means adding a dependency. Would prettified JSON suffice?

[0x416e746f6e]

i.d.k. prettified JSON doesn't have scalars like |-

e.g. imagine there's a change in tcb_info. tdxModuleIdentities[1].tcbLevels[1].advisoryIDs - if it's cramped into a long string that contains escaped json object then that will not be easy to review.

no strong opinion though. not sure we will even have collaterals in git.

[ameba23]

@0x416e746f6e i think i have responded to everything except for converting the test asset files from JSON to YAML. I can do that if you feel strongly.