Enum SGXConstraints

pub enum SGXConstraints {
    V0 {
        enclaves: Vec<EnclaveIdentity>,
        allowed_quote_statuses: Vec<i64>,
    },
    V1 {
        enclaves: Vec<EnclaveIdentity>,
        policy: QuotePolicy,
        max_attestation_age: u64,
    },
}

Intel SGX TEE constraints.

Variants

V0

Old V0 format that only supported IAS policies.

Fields

enclaves: Vec<EnclaveIdentity>

The allowed MRENCLAVE/MRSIGNER pairs.

allowed_quote_statuses: Vec<i64>

A set of allowed quote statuses.

V1

New V1 format that supports both IAS and PCS policies.

Fields

enclaves: Vec<EnclaveIdentity>

The allowed MRENCLAVE/MRSIGNER pairs.

policy: QuotePolicy

The quote policy.

max_attestation_age: u64

The maximum attestation age (in blocks).

Implementations

impl SGXConstraints

pub fn enclaves(&self) -> &Vec<EnclaveIdentity>

Identities of allowed enclaves.

pub fn contains_enclave(&self, eid: &EnclaveIdentity) -> bool

Checks whether the given enclave identity is whitelisted.

pub fn policy(&self) -> QuotePolicy

SGX quote policy.

Trait Implementations

impl Clone for SGXConstraints

fn clone(&self) -> SGXConstraints

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SGXConstraints

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Decode for SGXConstraints

fn try_from_cbor_value(value: Value) -> Result<Self, DecodeError>

Try to decode from a given CBOR value.

fn try_default() -> Result<Self, DecodeError>

where Self: Sized,

Try to decode from a missing/null/undefined value.

fn try_from_cbor_value_default(value: Value) -> Result<Self, DecodeError>

where Self: Sized,

Try to decode from a given CBOR value, calling try_default in case the value is null or undefined.

impl Encode for SGXConstraints

fn into_cbor_value(self) -> Value

Encode the type into a CBOR Value.

fn is_empty(&self) -> bool

Whether the value is equal to the empty value for the type.

impl EncodeAsMap for SGXConstraints

fn into_cbor_value_map(self) -> Value

where Self: Sized,

Encode the type into a CBOR Map.

fn into_cbor_map(self) -> Vec<(Value, Value)>

where Self: Sized,

Encode the type into a CBOR Map, returning the map items.