tenzro-tee 0.1.0

TEE abstraction layer for Tenzro Network — Intel TDX, AMD SEV-SNP, AWS Nitro, NVIDIA GPU, Intel Tiber Trust Authority
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106

//! Error types for the Tenzro Network TEE module.

use thiserror::Error;

/// Result type for TEE operations.
pub type Result<T> = std::result::Result<T, TeeError>;

/// Errors that can occur in TEE operations.
#[derive(Debug, Error)]
pub enum TeeError {
    /// TEE hardware is not available
    #[error("TEE hardware not available: {0}")]
    NotAvailable(String),

    /// Attestation generation failed
    #[error("Failed to generate attestation: {0}")]
    AttestationGenerationFailed(String),

    /// Attestation verification failed
    #[error("Attestation verification failed: {0}")]
    AttestationVerificationFailed(String),

    /// Invalid attestation report
    #[error("Invalid attestation report: {0}")]
    InvalidAttestationReport(String),

    /// Certificate chain validation failed
    #[error("Certificate chain validation failed: {0}")]
    CertificateValidationFailed(String),

    /// TCB (Trusted Computing Base) version is outdated
    #[error("TCB version outdated: current={current}, required={required}")]
    TcbOutdated {
        current: String,
        required: String,
    },

    /// Enclave operation failed
    #[error("Enclave operation failed: {0}")]
    EnclaveOperationFailed(String),

    /// Key generation failed
    #[error("Key generation failed: {0}")]
    KeyGenerationFailed(String),

    /// Cryptographic operation failed
    #[error("Cryptographic operation failed: {0}")]
    CryptoOperationFailed(String),

    /// Encryption failed
    #[error("Encryption failed: {0}")]
    EncryptionError(String),

    /// Decryption failed
    #[error("Decryption failed: {0}")]
    DecryptionError(String),

    /// Invalid key handle
    #[error("Invalid key handle: {0}")]
    InvalidKeyHandle(String),

    /// Provider not found
    #[error("Provider not found: {0}")]
    ProviderNotFound(String),

    /// Provider registration failed
    #[error("Provider registration failed: {0}")]
    RegistrationFailed(String),

    /// Configuration error
    #[error("Configuration error: {0}")]
    ConfigurationError(String),

    /// I/O error
    #[error("I/O error: {0}")]
    IoError(#[from] std::io::Error),

    /// Serialization error
    #[error("Serialization error: {0}")]
    SerializationError(#[from] serde_json::Error),

    /// Cryptographic error
    #[error("Cryptographic error: {0}")]
    CryptoError(String),

    /// Internal error
    #[error("Internal error: {0}")]
    Internal(String),
}

impl TeeError {
    /// Creates a new NotAvailable error.
    pub fn not_available(msg: impl Into<String>) -> Self {
        TeeError::NotAvailable(msg.into())
    }

    /// Creates a new AttestationVerificationFailed error.
    pub fn attestation_failed(msg: impl Into<String>) -> Self {
        TeeError::AttestationVerificationFailed(msg.into())
    }

    /// Creates a new Internal error.
    pub fn internal(msg: impl Into<String>) -> Self {
        TeeError::Internal(msg.into())
    }
}