Interface KeyManagerCHURPPolicySGX

PolicySGX represents an SGX access control policy used to authenticate key manager enclaves during handoffs and remote client enclaves when querying key shares.

interface KeyManagerCHURPPolicySGX {
    id: number;
    may_join: SGXEnclaveIdentity[];
    may_query?: Map<Uint8Array, SGXEnclaveIdentity[]>;
    may_share: SGXEnclaveIdentity[];
    runtime_id: Uint8Array;
    serial: number;
}

Hierarchy (view full)

Properties

id: number

ID is a unique CHURP identifier within the key manager runtime.

may_join: SGXEnclaveIdentity[]

MayJoin is the vector of enclave identities that may form the new committee in the next handoffs.

may_query?: Map<Uint8Array, SGXEnclaveIdentity[]>

MayQuery is the map of runtime identities to the vector of enclave identities that may query key shares.

may_share: SGXEnclaveIdentity[]

MayShare is the vector of enclave identities from which a share can be obtained during handoffs.

runtime_id: Uint8Array

RuntimeID is the identifier of the key manager runtime.

serial: number

Serial is the monotonically increasing policy serial number.