{"uid":"cap_HCCtQF-_Uzu37kGN5yzDx","slug":"tpm2-p256-sha256-quote-attestation-pcr-nonce-signature-binding-verifier-bce11296","name":"TPM2 P256/SHA256 Quote Attestation PCR-Nonce Signature Binding Verifier","description":"Verify supplied TPM2 quote signature and complete selected-PCR nonce signer bindings. Reconstruct the fully typed result and compare its complete canonical SHA256 claim.","url":"https://detect.halowerk.com/v1/F-TD2000-DOCUMENTS-12/tpm20-p256-sha256-quote-attestation-pcr-nonce-signature-binding?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"artifact":{"type":"object","$defs":{"s0":{"type":"string","pattern":"^[0-9a-f]{64}$","maxLength":64,"minLength":64}},"required":["tpmQuote"],"properties":{"tpmQuote":{"type":"object","required":["data","claim"],"properties":{"data":{"type":"object","required":["attestation_hex","public_key_pem","signature_der_hex","expected_nonce_hex","expected_qualified_signer_hex","pcr_values"],"properties":{"pcr_values":{"type":"array","items":{"type":"object","required":["index","value_hex"],"properties":{"index":{"type":"integer","maximum":23,"minimum":0},"value_hex":{"$ref":"#/properties/input/properties/body/properties/artifact/%24defs/s0"}},"additionalProperties":false},"maxItems":24,"minItems":0},"public_key_pem":{"type":"string","maxLength":512,"minLength":1},"attestation_hex":{"type":"string","pattern":"^(?:[0-9a-f]{2})*$","maxLength":4096,"minLength":0},"signature_der_hex":{"type":"string","pattern":"^(?:[0-9a-f]{2})*$","maxLength":160,"minLength":0},"expected_nonce_hex":{"type":"string","pattern":"^(?:[0-9a-f]{2})*$","maxLength":128,"minLength":0},"expected_qualified_signer_hex":{"type":"string","pattern":"^(?:[0-9a-f]{2})*$","maxLength":136,"minLength":0}},"additionalProperties":false},"claim":{"anyOf":[{"type":"null"},{"$ref":"#/properties/input/properties/body/properties/artifact/%24defs/s0"}]}},"additionalProperties":false}},"additionalProperties":false}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_XeVplzVBm6WnPfxOqiS8b","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Verifies a TPM2 quote signature over selected PCRs and a nonce, reconstructs the typed attestation structure, and compares its canonical SHA256 claim hash.","exampleAgentPrompt":"Verify this TPM2 P256/SHA256 quote attestation for me: I have the attestation hex, the signer's public key in PEM format, the DER signature hex, the expected nonce hex, the expected qualified signer hex, and PCR values for indices 0 through 7 — please reconstruct the typed quote structure, check the nonce and PCR bindings, and confirm the canonical SHA256 claim matches.","exampleUseCases":[{"title":"Device boot integrity attestation","prompt":"I need to verify the TPM2 quote my server produced at boot — here's the attestation hex, the P256 public key PEM, the DER signature, the nonce I sent it, the qualified signer hex, and the expected PCR values for PCR0 through PCR7. Can you confirm the signature is valid and the PCR-nonce binding checks out?"},{"title":"Remote attestation for cloud VM","prompt":"Before trusting this cloud VM, I want to verify its TPM2 quote: I have the raw attestation bytes in hex, the EK public key in PEM, the ECDSA P256 signature in DER hex, the nonce I generated, the qualified signer hex, and PCR measurements for indices 0, 1, 2, and 4. Please reconstruct the quote and verify the SHA256 claim and PCR-nonce bindings."},{"title":"Supply chain hardware trust verification","prompt":"We're onboarding a new hardware device and need to verify its TPM2 attestation quote — I have the attestation_hex, public_key_pem, signature_der_hex, expected_nonce_hex, expected_qualified_signer_hex, and PCR values for all 24 PCR banks. Can you validate the P256 signature and confirm the canonical SHA256 claim matches?"}],"resultDescription":"Returns a structured result indicating whether the TPM2 P256/SHA256 quote signature is valid, whether the PCR-nonce bindings match the supplied expected values, and whether the reconstructed canonical SHA256 claim matches the provided claim hash.","failureModes":["Invalid or malformed attestation_hex returns a parse/deserialization error","Signature verification failure if public key does not match signing key","Nonce mismatch if expected_nonce_hex does not match the nonce embedded in the quote","PCR value mismatch if supplied PCR values do not match those in the quote","SHA256 claim mismatch if the canonical reconstruction does not match the provided claim","Malformed PEM public key causes key-loading failure","DER signature hex in wrong format returns signature parse error"],"whenToPreferThis":"Use this endpoint when you need cryptographic verification of a TPM2 quote produced using ECDSA P256 with SHA256, including both signature validity and PCR-nonce binding checks with canonical claim comparison. Prefer it over generic signature verification services when you specifically need TPM2 TPMS_ATTEST structure reconstruction and PCR binding semantics.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-11-04T06:40:41.223Z","isFirstParty":false,"canonicalSlug":"tpm2-p256-sha256-quote-attestation-pcr-nonce-signature-binding-verifier-bce11296"}