Networking Device Attestation and CoRIM-based Reference Measurement Sharing

Concise Reference Integrity Manifest (CoRIM)

Reference Integrity Manifest Data Model

The reference manifest includes a top-level structure that contains either a signed or an unsigned CoRIM. A CoRIM consists of one or more CoMIDs, each providing reference claims about the hardware and firmware of a device. Both the CoRIM and CoMIDs are encoded in CBOR format, with signed CoRIMs utilizing COSE signatures.

NVIDIA networking CoRIM files follow the 0.6 draft of the CoRIM specification: draft-ietf-rats-corim-06—Concise Reference Integrity Manifest. This may change at a later date when the CoRIM specification is finalized.

Note: CoRIM are available on the NVIDIA RIM service: NVIDIA RIM Service for the following devices: ConnectX-7, ConnectX-8, ConnectX-9, BlueField-3. For ConnectX devices, they are also published with the official NVIDIA firmware releases.


Last updated: