conxius-enclave-sdk 2.0.11

Hardware-backed security primitives for the broader Conxian ecosystem. Provides high-integrity root of trust for security-sensitive wallet, signing, attestation, and policy flows.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57

use crate::enclave::EnclaveManager;
use crate::ConclaveResult;
use serde::{Deserialize, Serialize};
use std::sync::Arc;

/// Personal Sovereign Identity (PSI) service for hardware-backed user identity.
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct IdentityProfile {
    pub did: String,
    pub public_key: String,
    pub hardware_attestation: String,
}

pub struct IdentityManager {
    enclave: Arc<dyn EnclaveManager>,
}

impl IdentityManager {
    pub fn new(enclave: Arc<dyn EnclaveManager>) -> Self {
        Self { enclave }
    }

    /// Generates a hardware-backed personal identity (DID).
    pub fn create_identity(&self) -> ConclaveResult<IdentityProfile> {
        let public_key = self.enclave.get_public_key("m/44'/5757'/0'/0/identity")?;

        // Simple DID format: did:conxian:<pubkey_hex>
        let did = format!("did:conxian:{}", public_key);

        Ok(IdentityProfile {
            did,
            public_key,
            hardware_attestation: "HW_TEE_v1".to_string(),
        })
    }
}

#[cfg(test)]
mod tests {
    use super::*;
    use crate::enclave::cloud::CloudEnclave;

    #[test]
    fn test_create_identity() -> crate::ConclaveResult<()> {
        let enclave = Arc::new(CloudEnclave::new(
            "https://vault.conxian-labs.com".to_string(),
        )?);
        let mgr = IdentityManager::new(enclave);

        let profile = mgr.create_identity()?;
        assert!(profile.did.starts_with("did:conxian:"));
        assert!(!profile.public_key.is_empty());
        assert_eq!(profile.hardware_attestation, "HW_TEE_v1");

        Ok(())
    }
}