65 lines
2.2 KiB
Solidity
65 lines
2.2 KiB
Solidity
pragma solidity ^0.8.0;
|
||
|
||
import "@openzeppelin/contracts/utils/Address.sol";
|
||
import "@openzeppelin/contracts/utils/cryptography/ECDSA.sol";
|
||
import "@openzeppelin/contracts/utils/cryptography/draft-EIP712.sol";
|
||
|
||
// 继承 EIP712 合约，实现基于 EIP712 的消息签名验证
|
||
contract QuoteVerifier is EIP712 {
|
||
using Address for address;
|
||
using ECDSA for bytes32;
|
||
|
||
// 存储签名者的证书
|
||
mapping(address => bool) public validCertificates;
|
||
|
||
// 定义Quote结构体，用于存储和解析Quote字节数据
|
||
struct Quote {
|
||
bytes48 quoteHeader;
|
||
bytes16 cpuSvn;
|
||
bytes4 miscSelect;
|
||
bytes28 reserved1;
|
||
bytes16 attributes;
|
||
bytes32 mrEnclave;
|
||
bytes32 reserved2;
|
||
bytes32 mrSigner;
|
||
bytes96 reserved3;
|
||
bytes2 isvProdId;
|
||
bytes2 isvSvn;
|
||
bytes60 reserved4;
|
||
bytes64 reportData;
|
||
bytes4 signatureDataLen;
|
||
bytes signatureData;
|
||
}
|
||
|
||
// 构造函数，传入 EIP712 的 domainName 和 version
|
||
constructor(string memory domainName, string memory version) EIP712(domainName, version) {}
|
||
|
||
// 验证Quote是否合法，使用 calldata 关键字指定数据不可变
|
||
function verifyQuote(
|
||
address signer, // 签名者证书
|
||
bytes calldata quoteBytes, // Quote数据的字节数组
|
||
) external view returns (bool) {
|
||
// 将字节数组解码为 Quote 结构体
|
||
Quote memory quote = abi.decode(quoteBytes, (Quote));
|
||
|
||
// 验证证书是否合法
|
||
require(validCertificates[signer], "证书无效");
|
||
|
||
// 验证签名是否正确
|
||
bytes32 messageHash = encodeDataHash(quote);
|
||
require(signer == messageHash.recover(quote.signatureData), "签名无效");
|
||
|
||
// 验证Enclave Measurement是否正确
|
||
bytes32 expectedMeasurementHash = bytes32(0x...); // Trusted measurement hash
|
||
require(quote.enclaveHash == expectedMeasurementHash, "Enclave Measurement无效");
|
||
|
||
// 验证Report Data是否正确
|
||
bytes32 reportDataHash = bytes32(0x...); // Trusted Report Data;
|
||
require(quote.reportData == reportDataHash, "Report Data无效");
|
||
|
||
// 验证Quote是否在有效期内
|
||
require(block.timestamp <= quote.timestamp, "Quote已过期");
|
||
|
||
return true;
|
||
}
|
||
} |