ibmse: use hash rather than hex for initdata digest in claims

Use the initdata hash value directly rather than it's hex in claims Signed-off-by: Qi Feng Huo <[email protected]>
confidential-containers · Aug 12, 2024 · 81f904f · 81f904f
1 parent e3bd648
commit 81f904f
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/deps/verifier/src/se/ibmse.rs b/deps/verifier/src/se/ibmse.rs
@@ -90,8 +90,7 @@ pub struct SeAttestationResponse {
 pub struct SeAttestationClaims {
     #[serde_as(as = "Hex")]
     cuid: ConfigUid,
-    #[serde_as(as = "Hex")]
-    user_data: Vec<u8>,
+    user_data: String,
     version: u32,
     #[serde_as(as = "Hex")]
     image_phkh: Vec<u8>,
@@ -218,7 +217,7 @@ impl SeVerifierImpl {
 
         let claims = SeAttestationClaims {
             cuid: se_response.cuid,
-            user_data: se_response.user_data.clone(),
+            user_data: String::from_utf8(se_response.user_data.clone())?,
             version: AttestationVersion::One as u32,
             image_phkh: image_phkh.to_vec(),
             attestation_phkh: attestation_phkh.to_vec(),