Struct oasis_core_runtime::identity::Identity

pub struct Identity { /* private fields */ }

Runtime identity.

The identity can be used to sign remote attestations with runtime attestation key (RAK) or to decrypt ciphertexts sent to the enclave with runtime encryption key (REK). RAK avoids round trips to IAS/PCS for each verification as the verifier can instead verify the RAK signature and the signature on the provided quote which binds RAK to the enclave. REK allows enclaves to publish encrypted data on-chain to an enclave instance.

Implementations

impl Identity

pub fn new() -> Self

Create an uninitialized runtime identity.

pub fn public_rak(&self) -> PublicKey

Public part of RAK.

This method will return an insecure test key in the case where the enclave is not running on SGX hardware.

pub fn public_rek(&self) -> PublicKey

Public part of REK.

This method will return an insecure test key in the case where the enclave is not running on SGX hardware.

pub fn quote(&self) -> Option<Arc<Quote>>

Quote for RAK.

This method may return None in case quote has not yet been set from the outside, or if the quote has expired.

pub fn quote_policy(&self) -> Option<Arc<QuotePolicy>>

Runtime quote policy.

This method may return None in the case where the enclave is not running on SGX hardware or if the quote policy has not yet been fetched from the consensus layer.

pub fn verify_binding(quote: &VerifiedQuote, rak: &PublicKey) -> Result<()>

Verify a provided RAK binding.

pub fn rak_matches(&self, rak: &PublicKey, quote: &Quote) -> bool

Checks whether the RAK matches another specified (RAK_pub, quote) pair.

Trait Implementations

impl Default for Identity

fn default() -> Self

Returns the “default value” for a type.

impl Opener for Identity

fn box_open( &self, nonce: &[u8; 15], ciphertext: Vec<u8>, additional_data: Vec<u8>, peers_public_key: &PublicKey ) -> Result<Vec<u8>>

Unboxes (“opens”) the provided additional data and ciphertext.

impl Signer for Identity

fn public(&self) -> PublicKey

Returns the public key corresponding to the signer.

fn sign(&self, context: &[u8], message: &[u8]) -> Result<Signature>

Generates a signature over the context and message.