Enum SealingPolicy 

pub enum SealingPolicy {
    MeasurementAndChip,
    MeasurementOnly,
    ChipOnly,
}

Sealing policy determines what TEE identity fields bind the key.

Variants

MeasurementAndChip

Bind to both measurement and chip_id (strictest). Data can only be unsealed by the exact same guest image on the exact same physical chip.

MeasurementOnly

Bind to measurement only (portable across chips). Data can be unsealed by the same guest image on any chip.

ChipOnly

Bind to chip only (survives firmware/image updates). Data can be unsealed by any guest image on the same chip.

Trait Implementations

impl Clone for SealingPolicy

fn clone(&self) -> SealingPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SealingPolicy

impl Debug for SealingPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SealingPolicy

fn default() -> SealingPolicy

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SealingPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for SealingPolicy

impl PartialEq for SealingPolicy

fn eq(&self, other: &SealingPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for SealingPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SealingPolicy