Struct oasis_core_runtime::consensus::registry::EndorsedCapabilityTEE

pub struct EndorsedCapabilityTEE {
    pub capability_tee: CapabilityTEE,
    pub node_endorsement: SignatureBundle,
}

An endorsed CapabilityTEE structure.

Endorsement is needed for off-chain runtime components where their RAK is not published in the consensus layer and verification is part of the runtime itself. Via endorsement one can enforce policies like “only components executed by the current compute committee are authorized”.

Fields

capability_tee: CapabilityTEE

TEE capability structure to be endorsed.

node_endorsement: SignatureBundle

Node endorsement signature.

Implementations

impl EndorsedCapabilityTEE

pub fn verify_endorsement(&self) -> Result<()>

Verify the endorsement signature is valid.

This does not verify the TEE capability itself, use verify for that.

pub fn verify( &self, policy: &QuotePolicy, ) -> Result<VerifiedEndorsedCapabilityTEE>

Verify endorsed TEE capability is valid.

Trait Implementations

impl Clone for EndorsedCapabilityTEE

fn clone(&self) -> EndorsedCapabilityTEE

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EndorsedCapabilityTEE

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Decode for EndorsedCapabilityTEE

fn try_default() -> Result<Self, DecodeError>

Try to decode from a missing/null/undefined value.

fn try_from_cbor_value(value: Value) -> Result<Self, DecodeError>

Try to decode from a given CBOR value.

fn try_from_cbor_value_default(value: Value) -> Result<Self, DecodeError>

where Self: Sized,

Try to decode from a given CBOR value, calling try_default in case the value is null or undefined.

impl Default for EndorsedCapabilityTEE

fn default() -> EndorsedCapabilityTEE

Returns the “default value” for a type.

impl Encode for EndorsedCapabilityTEE

fn into_cbor_value(self) -> Value

Encode the type into a CBOR Value.

fn is_empty(&self) -> bool

Whether the value is equal to the empty value for the type.

impl EncodeAsMap for EndorsedCapabilityTEE

fn into_cbor_value_map(self) -> Value

where Self: Sized,

Encode the type into a CBOR Map.

fn into_cbor_map(self) -> Vec<(Value, Value)>

where Self: Sized,

Encode the type into a CBOR Map, returning the map items.

impl Hash for EndorsedCapabilityTEE

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for EndorsedCapabilityTEE

fn eq(&self, other: &EndorsedCapabilityTEE) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for EndorsedCapabilityTEE

impl StructuralPartialEq for EndorsedCapabilityTEE