enclavia 0.1.0

Encrypted HTTP client SDK for the Enclavia enclave runtime: Noise tunnel over WebSocket with built-in attestation verification.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

use serde::{Deserialize, Serialize};

pub(crate) const NOISE_PATTERN: &str = "Noise_NN_25519_ChaChaPoly_BLAKE2s";

/// Which halves of an open stream to close. Wire-compatible with
/// `enclavia_protocol::StreamHalf`.
#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
pub(crate) enum StreamHalf {
    Write,
    Both,
}

/// Messages sent from the client to the enclave server. Wire-compatible with
/// `enclavia_protocol::ClientMessage` in the enclavia-server workspace.
#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(tag = "type")]
pub(crate) enum ClientMessage {
    RequestAttestation,
    Data { id: u64, payload: Vec<u8> },
    Control { payload: Vec<u8>, signature: Vec<u8> },
    OpenStream { id: u64, payload: Vec<u8> },
    StreamData { id: u64, payload: Vec<u8> },
    StreamClose { id: u64, half: StreamHalf },
}

/// Messages sent from the enclave server to the client.
#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(tag = "type")]
pub(crate) enum ServerMessage {
    Attestation { data: Vec<u8>, control_nonce: [u8; 32] },
    Data { id: u64, payload: Vec<u8> },
    Error { id: u64, message: String },
    ControlResult { success: bool, message: String },
    StreamData { id: u64, payload: Vec<u8> },
    StreamClose { id: u64 },
}