Struct SealedSeed 

pub struct SealedSeed {
    pub id: SealedSeedId,
    pub ciphertext: Vec<u8>,
}

The user node’s provisioned seed that is sealed and persisted using its platform enclave keys that are software and version specific.

This struct is returned directly from the DB so it should be considered as untrusted and not-yet-validated.

• To validate and convert a SealedSeed into a RootSeed, use unseal_and_validate. The returned RootSeed is bound to the returned DeployEnv and Network, which can be used to validate e.g. the Network supplied by the Lexe operators via CLI args.
• To encrypt an existing RootSeed (and DeployEnv and Network) into a SealedSeed, use seal_from_root_seed.

See lexe_enclave::enclave::seal for more implementation details.

Fields

id: SealedSeedId

ciphertext: Vec<u8>

The root seed, fully sealed + serialized.

Implementations

impl SealedSeed

pub fn new( user_pk: UserPk, measurement: Measurement, machine_id: MachineId, ciphertext: Vec<u8>, ) -> SealedSeed

pub fn seal_from_root_seed<R>( rng: &mut R, root_seed: &RootSeed, deploy_env: DeployEnv, network: Network, measurement: Measurement, machine_id: MachineId, ) -> Result<SealedSeed, Error>

where R: Crng,

pub fn unseal_and_validate( self, expected_measurement: &Measurement, expected_machine_id: &MachineId, ) -> Result<(RootSeed, DeployEnv, Network), Error>

Trait Implementations

impl Clone for SealedSeed

fn clone(&self) -> SealedSeed

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SealedSeed

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SealedSeed

fn deserialize<__D>( __deserializer: __D, ) -> Result<SealedSeed, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for SealedSeed

fn eq(&self, other: &SealedSeed) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for SealedSeed

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Signable for SealedSeed

const DOMAIN_SEPARATOR: [u8; 32]

Implementors will only need to fill in this value. An example is array::pad(*b"LEXE-REALM::RootSeed"), used in the RootSeed.

impl StructuralPartialEq for SealedSeed