Need a method to decode the SPDM transaction log output from the SPDMGetSignedMeasurements Action in Redfish.

[pboyd04]

libspdm currently allows for decoding the get measurements request/response itself, but doesn't include a method for the whole transaction log (VCA + GET_MEASUREMENTS + MEASUREMENTS) as returned by Redfish Action.

I would like to add a method such as this:

libspdm_return_t libspdm_parse_measurement_transaction_data(void* data, size_t data_size, spdm_measurement_block_common_header_t** measurements, size_t* measurement_count);

That would abstract the clients from each having to reinvent parts of libspdm and keep those implementations up to date with new versions.

[steven-bellock]

This ask is part of a more general ask for providing generation / parsing tools that may not be included directly in the Requester or Responder. It would be a separate library, say something like spdm_tools_lib. This has been on the backburner since we are still implementing 1.3/1.4. I will start a discussion for this.

[steven-bellock]

@pboyd04 see #3568.

[pboyd04]

So not asking for it to parse the Measurement Record or the supported algorithms. Just asking it to pull the measurement records out of a transaction blob. And I'd really like to keep this in libspdm since we already are carrying a copy of libspdm and the whole point of this ask is to not have to spin multiple pieces of code every time a new SPDM version is released or deal with lag when a requestor/responder pair support SPDM version X, but the other library only supports version X-1...

Additionally some of the needed logic is already in libspdm and just needs to be genericized a bit. While I agree it's not a perfect fit, it's a better fit than having to maintain an entirely separate library and keeping them both in sync with the spec.

[steven-bellock]

For this particular issue, to start, the logic can just go into spdm_requester_lib. It can then be moved to #3568 once that exists.