Module tee 

TEE (Trusted Execution Environment) support.

This module provides hardware detection, configuration, attestation, and verification for Trusted Execution Environments (AMD SEV-SNP).

• snp: Hardware detection for AMD SEV-SNP.
• attestation: Attestation report types and parsing.
• verifier: Host-side report verification (signature + policy).
• policy: Verification policy definitions.
• certs: AMD KDS certificate fetching and caching.
• ark_roots: Pinned genuine AMD ARK root keys (chain trust anchor).

Re-exports

pub use attestation::parse_platform_info;

pub use attestation::AttestationReport;

pub use attestation::AttestationRequest;

pub use attestation::CertificateChain;

pub use attestation::PlatformInfo;

pub use attestation::TcbVersion;

pub use certs::AmdKdsClient;

pub use extension::SnpTeeExtension;

pub use extension::TeeExtension;

pub use kbs::KbsClient;

pub use kbs::KbsConfig;

pub use kbs::KbsRequest;

pub use kbs::KbsResponse;

pub use kbs::KbsSecret;

pub use policy::AttestationPolicy;

pub use policy::MinTcbPolicy;

pub use policy::PolicyResult;

pub use policy::PolicyViolation;

pub use reattest::FailureAction;

pub use reattest::ReattestConfig;

pub use reattest::ReattestState;

pub use reattest::ReattestSummary;

pub use rollback::seal_versioned;

pub use rollback::unseal_versioned;

pub use rollback::VersionStore;

pub use rollback::VersionedSealedData;

pub use sealed::seal;

pub use sealed::unseal;

pub use sealed::SealedData;

pub use sealed::SealingPolicy;

pub use simulate::build_simulated_report;

pub use simulate::is_simulate_mode;

pub use simulate::is_simulated_report;

pub use simulate::TEE_SIMULATE_ENV;

pub use snp::check_sev_snp_support;

pub use snp::require_sev_snp_support;

pub use snp::SevSnpSupport;

pub use verifier::verify_attestation;

pub use verifier::verify_attestation_with_time;

pub use verifier::VerificationResult;

Modules

ark_roots

Pinned AMD SEV ARK (AMD Root Key) trust anchors.

attestation

TEE attestation report types and guest-side report generation.

certs

AMD certificate chain fetching and caching.

extension

TeeExtension - Trait for TEE operations on a running VM.

kbs

KBS (Key Broker Service) client for TEE secret provisioning.

policy

Attestation verification policy.

ratls

RA-TLS (Remote Attestation TLS) for AMD SEV-SNP.

reattest

Periodic re-attestation for long-running TEE workloads.

rollback

Version-based rollback protection for sealed storage.

sealed

Sealed storage for TEE-bound encryption.

simulate

Simulated TEE attestation for development and testing.

snp

AMD SEV-SNP (Secure Encrypted Virtualization - Secure Nested Paging) support.

verifier

SNP attestation report verifier.