Enum oasis_core_runtime::enclave_rpc::session::RAKBinding

pub enum RAKBinding {
    V0 {
        rak_pub: PublicKey,
        binding: Signature,
        avr: AVR,
    },
    V1 {
        rak_pub: PublicKey,
        binding: Signature,
        quote: Quote,
    },
    V2 {
        ect: EndorsedCapabilityTEE,
        binding: Signature,
    },
}

Binding of the session’s static public key to a remote attestation verification report through the use of the remote attestation key.

The signature chain is as follows:

• avr contains the remote attestation verification report which binds RAK to the remote attestation.
• rak_pub contains the public part of RAK.
• binding is signed by rak_pub and binds the session’s static public key to RAK.

Variants

V0

Old V0 format that only supported IAS quotes.

Fields

rak_pub: PublicKey

binding: Signature

avr: AVR

V1

New V1 format that supports both IAS and PCS quotes.

Fields

rak_pub: PublicKey

binding: Signature

quote: Quote

V2

V2 format which supports endorsed CapabilityTEE structures.

Fields

ect: EndorsedCapabilityTEE

binding: Signature

Implementations

impl RAKBinding

pub fn rak_pub(&self) -> PublicKey

Public part of the RAK.

pub fn verify( &self, remote_static: &[u8], remote_enclaves: &Option<HashSet<EnclaveIdentity>>, policy: &QuotePolicy, ) -> Result<VerifiedEndorsedCapabilityTEE>

Verify the RAK binding.

Trait Implementations

impl Clone for RAKBinding

fn clone(&self) -> RAKBinding

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RAKBinding

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Decode for RAKBinding

fn try_from_cbor_value(value: Value) -> Result<Self, DecodeError>

Try to decode from a given CBOR value.

fn try_default() -> Result<Self, DecodeError>

where Self: Sized,

Try to decode from a missing/null/undefined value.

fn try_from_cbor_value_default(value: Value) -> Result<Self, DecodeError>

where Self: Sized,

Try to decode from a given CBOR value, calling try_default in case the value is null or undefined.

impl Encode for RAKBinding

fn into_cbor_value(self) -> Value

Encode the type into a CBOR Value.

fn is_empty(&self) -> bool

Whether the value is equal to the empty value for the type.

impl EncodeAsMap for RAKBinding

fn into_cbor_value_map(self) -> Value

where Self: Sized,

Encode the type into a CBOR Map.

fn into_cbor_map(self) -> Vec<(Value, Value)>

where Self: Sized,

Encode the type into a CBOR Map, returning the map items.