hardware-enclave 0.1.6

Hardware-backed key management — macOS Secure Enclave, Windows TPM 2.0, Linux TPM/keyring — plus in-process memory protection
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22

// Copyright 2026 Jay Gowdy
// SPDX-License-Identifier: MIT

//! JSON-RPC TPM bridge server for WSL2→Windows TPM routing.
//!
//! Windows binaries that serve the WSL2 TPM bridge instantiate [`BridgeServer`]
//! and call [`BridgeServer::run_stdio`]. The server reads JSON-RPC requests from
//! stdin and writes responses to stdout, handling signing, encryption, key
//! management, and key listing on behalf of WSL2 clients.
//!
//! # Usage
//!
//! ```ignore
//! // In the Windows tpm-bridge binary main():
//! use hardware_enclave::{harden_process, bridge_server::BridgeServer};
//!
//! harden_process();
//! let mut server = BridgeServer::new("my-app", "default-key");
//! server.run_stdio().expect("bridge server error");
//! ```

pub use crate::internal::tpm_bridge::{BridgeServer, TpmStorage};