a3s_box_runtime/tee/
mod.rs

1//! TEE (Trusted Execution Environment) support.
2//!
3//! This module provides hardware detection, configuration, attestation,
4//! and verification for Trusted Execution Environments (AMD SEV-SNP).
5//!
6//! - `snp`: Hardware detection for AMD SEV-SNP.
7//! - `attestation`: Attestation report types and parsing.
8//! - `verifier`: Host-side report verification (signature + policy).
9//! - `policy`: Verification policy definitions.
10//! - `certs`: AMD KDS certificate fetching and caching.
11//! - `ark_roots`: Pinned genuine AMD ARK root keys (chain trust anchor).
12
13pub mod ark_roots;
14pub mod attestation;
15pub mod certs;
16pub mod extension;
17pub mod kbs;
18pub mod policy;
19pub mod ratls;
20pub mod reattest;
21pub mod rollback;
22pub mod sealed;
23pub mod simulate;
24pub mod snp;
25pub mod verifier;
26
27pub use attestation::{
28    parse_platform_info, AttestationReport, AttestationRequest, CertificateChain, PlatformInfo,
29    TcbVersion,
30};
31pub use certs::AmdKdsClient;
32#[cfg(unix)]
33pub use extension::{SnpTeeExtension, TeeExtension};
34pub use kbs::{KbsClient, KbsConfig, KbsRequest, KbsResponse, KbsSecret};
35pub use policy::{AttestationPolicy, MinTcbPolicy, PolicyResult, PolicyViolation};
36pub use reattest::{FailureAction, ReattestConfig, ReattestState, ReattestSummary};
37pub use rollback::{seal_versioned, unseal_versioned, VersionStore, VersionedSealedData};
38pub use sealed::{seal, unseal, SealedData, SealingPolicy};
39pub use simulate::{
40    build_simulated_report, is_simulate_mode, is_simulated_report, TEE_SIMULATE_ENV,
41};
42pub use snp::{check_sev_snp_support, require_sev_snp_support, SevSnpSupport};
43pub use verifier::{verify_attestation, verify_attestation_with_time, VerificationResult};
a3s_box_runtime/tee/mod.rs

a3s_box_runtime/tee/
mod.rs
