Crate enclavia_protocol

Modules§

attestation: Nitro NSM attestation verification.
chain: Per-enclave public upgrade chain: shared types + pure validation.
custody: Self-hosted control-key custody helpers.
egress: Wire format shared between the in-enclave egress daemon (enclavia-egress) and the host-side relay (egress-host).
egress_config: The egress allowlist schema: the shared contract between everything that AUTHORS a policy and the in-enclave daemon that ENFORCES it.
kms_policy: In-enclave verification of a KMS key’s policy.
kms_recipient: Attestation-gated KMS decrypt: the CiphertextForRecipient envelope.
mesh: Wire format for the synchronizer mesh relay.
staging: Wire DTOs for the staged-upgrade API surface.

CborTransport: A wrapper around NoiseTransport that provides CBOR message sending/receiving with length-prefixed framing (4-byte big-endian length prefix + encrypted payload).
NoiseHandshake
NoiseTransport
RekeyParams: Storage re-key parameters for a PrepareUpgrade control command. Only provided for enclaves that have a persistent LUKS-backed storage volume; None for stateless enclaves.

ClientMessage: Messages sent from the client to the enclave server.
ControlCommand: Inner payload of a signed control command. Serialized as CBOR before signing — the wire-level signature covers the exact bytes the verifier then deserializes, so re-encoding skew can’t break verification.
ServerMessage: Messages sent from the enclave server to the client.
StreamHalf: Which halves of an upgraded stream a ClientMessage::StreamClose tears down.

CHAIN_LINK_ACK: The ACK byte chain-host sends after accepting a chain link. Value 0x06 (ASCII ACK). Must match chain-host/src/main.rs constant.
NOISE_PATTERN

perform_cbor_handshake_as_initiator: Perform handshake as initiator and return a CborTransport ready for CBOR messaging.
perform_cbor_handshake_as_responder: Perform handshake as responder and return a CborTransport ready for CBOR messaging.
perform_handshake_as_initiator
perform_handshake_as_responder
submit_chain_link: Shared helper: write a length-prefixed CBOR ChainLink to a generic async stream and wait for the one-byte 0x06 ACK from chain-host.