If verification of the signature over the attestation (log & nonce) fails it could be that a measurement was recorded between the time we got the log and the attestation. This is a race condition inherent to the protocol since we get the log and the attestation in two separate messages. There are couple of different things we can do In this case:
- get the log again and retry verification, if the second attempt fails return an error
- signal to the caller that they should try again
The first option seems the most reasonable. The second may cause confusion as it punts the decision to the caller.
If verification of the signature over the attestation (log & nonce) fails it could be that a measurement was recorded between the time we got the log and the attestation. This is a race condition inherent to the protocol since we get the log and the attestation in two separate messages. There are couple of different things we can do In this case:
The first option seems the most reasonable. The second may cause confusion as it punts the decision to the caller.