a3s-box-runtime 2.3.0

MicroVM runtime engine — VM lifecycle, OCI images, attestation, networking
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

//! TEE (Trusted Execution Environment) support.
//!
//! This module provides hardware detection, configuration, attestation,
//! and verification for Trusted Execution Environments (AMD SEV-SNP).
//!
//! - `snp`: Hardware detection for AMD SEV-SNP.
//! - `attestation`: Attestation report types and parsing.
//! - `verifier`: Host-side report verification (signature + policy).
//! - `policy`: Verification policy definitions.
//! - `certs`: AMD KDS certificate fetching and caching.
//! - `ark_roots`: Pinned genuine AMD ARK root keys (chain trust anchor).

pub mod ark_roots;
pub mod attestation;
pub mod certs;
pub mod extension;
pub mod kbs;
pub mod policy;
pub mod ratls;
pub mod reattest;
pub mod rollback;
pub mod sealed;
pub mod simulate;
pub mod snp;
pub mod verifier;

pub use attestation::{
    parse_platform_info, AttestationReport, AttestationRequest, CertificateChain, PlatformInfo,
    TcbVersion,
};
pub use certs::AmdKdsClient;
#[cfg(unix)]
pub use extension::{SnpTeeExtension, TeeExtension};
pub use kbs::{KbsClient, KbsConfig, KbsRequest, KbsResponse, KbsSecret};
pub use policy::{AttestationPolicy, MinTcbPolicy, PolicyResult, PolicyViolation};
pub use reattest::{FailureAction, ReattestConfig, ReattestState, ReattestSummary};
pub use rollback::{seal_versioned, unseal_versioned, VersionStore, VersionedSealedData};
pub use sealed::{seal, unseal, SealedData, SealingPolicy};
pub use simulate::{
    build_simulated_report, is_simulate_mode, is_simulated_report, TEE_SIMULATE_ENV,
};
pub use snp::{check_sev_snp_support, require_sev_snp_support, SevSnpSupport};
pub use verifier::{verify_attestation, verify_attestation_with_time, VerificationResult};