Struct MachineId 

pub struct MachineId(/* private fields */);

A unique identifier for a particular hardware enclave.

The intention with this identifier is to compactly communicate whether a piece of hardware with this id (in its current state) has the capability to unseal some Sealed data that was sealed on hardware possessing the same id.

An easy way to show unsealing capability is to actually derive a key from the SGX platform. Rather than encrypting some data with this key, we’ll instead use it as a public identifier. For different enclaves to still derive the same machine id, we’ll use the enclave signer (Lexe) in our key derivation instead of the per-enclave measurement.

As an added bonus, if the machine operator ever bumps the OWNER_EPOCH in the BIOS, the machine id will automatically change to a different value, correctly reflecting this machine’s inability to unseal the old data.

NOTE: on SGX this capability is modulo the CPUSVN (i.e., doesn’t commit to the CPUSVN) since it allows us to easily upgrade the SGX TCB platform without needing to also online-migrate sealed enclave state.

Implementations

impl MachineId

pub const MOCK: Self

pub const fn new(bytes: [u8; 16]) -> Self

Trait Implementations

impl AsRef<[u8]> for MachineId

fn as_ref(&self) -> &[u8]

Converts this type into a shared reference of the (usually inferred) input type.

impl AsRef<[u8; 16]> for MachineId

fn as_ref(&self) -> &[u8; 16]

Converts this type into a shared reference of the (usually inferred) input type.

impl ByteArray<16> for MachineId

fn from_array(array: [u8; 16]) -> Self

fn to_array(&self) -> [u8; 16]

fn as_array(&self) -> &[u8; 16]

fn as_slice(&self) -> &[u8]

fn to_vec(&self) -> Vec<u8>

fn try_from_slice(slice: &[u8]) -> Result<Self, TryFromSliceError>

fn try_from_vec(vec: Vec<u8>) -> Result<Self, TryFromSliceError>

fn from_hex(s: &str) -> Result<Self, DecodeError>

fn to_hex(&self) -> String

fn as_hex_display(&self) -> HexDisplay<'_>

fn fmt_as_hex(&self, f: &mut Formatter<'_>) -> Result<(), Error>

impl Clone for MachineId

fn clone(&self) -> MachineId

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MachineId

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for MachineId

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>

where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for MachineId

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl FromHex for MachineId

fn from_hex(s: &str) -> Result<Self, DecodeError>

impl FromStr for MachineId

type Err = DecodeError

The associated error which can be returned from parsing.

fn from_str(s: &str) -> Result<Self, Self::Err>

Parses a string s to return a value of this type.

impl Hash for MachineId

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for MachineId

fn cmp(&self, other: &MachineId) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl PartialEq for MachineId

fn eq(&self, other: &MachineId) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialOrd for MachineId

fn partial_cmp(&self, other: &MachineId) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl RefCast for MachineId

type From = [u8; 16]

fn ref_cast(_from: &Self::From) -> &Self

fn ref_cast_mut(_from: &mut Self::From) -> &mut Self

impl Serialize for MachineId

fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>

where S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for MachineId

impl Eq for MachineId

impl StructuralPartialEq for MachineId