Crate mc_attestation_verifier

MobileCoin: SGX Enclave Attestation Report Verification

SGX Enclave Attestation Report Verification

Structs

• Advisories
  The advisories pertaining to a TCB(Trusted Computing Base).
• AdvisoriesVerifier
  Verifier for ensuring the expected Advisories are the only advisories present and that they have a status that is at least as good as the expected.
• AlwaysFalse
  Failure due to AlwaysFalse
• AlwaysFalseValue
  Marker struct to ensure a node in the VerificationOutput was for an AlwaysFalse
• AlwaysTrue
  Success due to AlwaysTrue
• AlwaysTrueValue
  Marker struct to ensure a node in the VerificationOutput was for an AlwaysTrue
• And
  Will perform a logical and operation for the Verifier::verify() operation.
• AndOutput
  The output of an and operation.
• EqualityVerifier
  Common implementation for Verifiers that test for equality between an expected and actual value.
• Evidence
  The full set of evidence needed for verifying a quote
• EvidenceValue
  The result of verifying Evidence.
• EvidenceVerifier
  Verifier for evidence
• GreaterThanEqualVerifier
  Common implementation for Verifiers that test for an actual value being greater than or equal to an expected value
• MaskedVerifier
  Common implementation for Verifiers that test for masked expected and actual value.
• MrSignerVerifier
  Verifier for ensuring all of the MRSIGNER inputs are sufficient.
• Not
  Negated due to Not
• NotOutput
  The output of a Not operation.
• Or
  Will perform a logical or operation for the Verifier::verify() operation.
• OrOutput
  The output of an or operation.
• QeIdentity
  QE(quoting enclave) identity information.
• QeReportBody
  QE(quoting enclave) report body
• QeReportBodyVerifier
  Verifier for ensuring a QE(quoting enclave) matches the provided identity
• Quote3Verifier
  Verifier for ensuring a quote was signed with the provided key
• SignedQeIdentity
  Signed quoting enclave (QE) identity.
• SignedQeIdentityVerifier
  Verifier for ensuring a QE(Quoting Enclave) identity was signed with the provided key
• SignedTcbInfo
  Signed TCB(Trusted Computing Base) info provided from https://api.trustedservices.intel.com/sgx/certification/v4/tcb?fmspc={}
• SignedTcbInfoVerifier
  Verifier for ensuring a TCB info was signed with the provided key
• TcbInfo
  The tcbInfo member of the TCB(Trusted Computing Base) data retrieved from https://api.trustedservices.intel.com/sgx/certification/v4/tcb?fmspc={} The schema is available at https://api.portal.trustedservices.intel.com/documentation#pcs-tcb-info-model-v3
• TrustedIdentitiesVerifier
  A verifier for determining if one of the provided identities matches the enclave.
• TrustedMrEnclaveIdentity
  Trusted identity for MRENCLAVE values.
• TrustedMrSignerIdentity
  Trusted MRSIGNER identity.
• VerificationOutput
  The output of a verification operation, Verifier::verify().
• VerificationTreeDisplay
  A helper struct for displaying the verification results.

Enums

• AdvisoryStatus
  The status of a set of advisories
• CertificateChainVerifierError
  Error verifying a certificate chain
• Error
  Error working with quote evidence
• TrustedIdentity
  Trusted identity for an enclave.

Constants

• MESSAGE_INDENT
  Number of spaces to indent nested VerificationMessages.

Traits

• Accessor
  Trait for getting access to the type T that needs to be verified.
• CertificateChainVerifier
  A trait whose implementation will verify multiple certificate chains which all use the same trust anchor.
• VerificationMessage
  An interface for displaying the result of a verification step via the VerificationTreeDisplay.
• Verifier
  A verifier. These can composed using the Or and And types.

Functions

• choice_to_status_message
  Provides a success/fail indicator to VerificationMessage implementations

Type Aliases

• AttributesVerifier
  Verifier for ensuring Attributes values are equivalent.
• ConfigIdVerifier
  Verifier for ensuring ConfigId values are equivalent.
• ConfigSvnVerifier
  Verifier for ensuring ConfigSvn is greater than or equal to an expected ConfigSvn
• CpuSvnVerifier
  Verifier for ensuring CpuSvn is greater than or equal to an expected CpuSvn
• ExtendedProductIdVerifier
  Verifier for ensuring ExtendedProductId values are equivalent.
• FamilyIdVerifier
  Verifier for ensuring FamilyId values are equivalent.
• IsvProductIdVerifier
  Verifier for ensuring IsvProductId values are equivalent.
• IsvSvnVerifier
  Verifier for ensuring IsvSvn is greater than or equal to an expected IsvSvn
• MiscellaneousSelectVerifier
  Verifier for ensuring MiscellaneousSelect values are equivalent.
• MrEnclaveVerifier
  Verifier for ensuring MrEnclave values are equivalent.
• ReportDataVerifier
  Verifier for ensuring ReportData values are equivalent.