Skip to main content

Module attestation

Module attestation 

Source
Expand description

SGX Attestation module for Gramine

This module provides SGX DCAP attestation functionality through Gramine’s /dev/attestation pseudo-filesystem interface.

§Overview

  • Reads SGX quotes from /dev/attestation/quote
  • Supports custom user report data (e.g., node public key hash)
  • Returns base64-encoded quote and certificate chain for remote verification

§Usage

let report = get_attestation_report(Some(b"my-custom-data"))?;
// Send report.quote to remote verifier

Structs§

AttestationReport
SGX attestation report containing quote and metadata

Enums§

AttestationError

Functions§

get_attestation_report
Generate an SGX attestation report with optional user data
get_attestation_type
Get the attestation type (e.g., “none” or “dcap”)
get_attestation_with_pubkey
Get attestation report with node’s public key embedded
is_attestation_available
Check if SGX attestation is available