Struct SgxSign

pub struct SgxSign { /* private fields */ }

Wrapper for the enclave signing tool (sgx_sign).

The enclave signing tool ships as part of the Intel® Software Guard Extensions SDK. Signing an enclave is a process that involves producing a signature structure that contains enclave properties such as the enclave measurement. Once an enclave is signed in such structure, the modifications to the enclave file (such as code, data, signature, and so on) can be detected. The signing tool also evaluates the enclave image for potential errors and warns you about potential security hazards.

See Enclave Signing Tool Documentation for more details.

Implementations

impl SgxSign

pub fn allow_relocations(self, allow: bool) -> Self

Relocations are generally forbidden in the enclave shared object, this tells the sgx_sign utility to ignore those errors.

pub fn allow_init_sections(self, allow: bool) -> Self

Whether or not to allow .init sections in the enclave.

pub fn allow_resign(self, allow: bool) -> Self

Whether to re-sign a previously signed enclave (default: false)

pub fn sign( &mut self, unsigned_enclave: impl AsRef<Path>, config_file: impl AsRef<Path>, private_key: impl AsRef<Path>, output_enclave: impl AsRef<Path>, ) -> Command

Generate the command to sign the given enclave object with the given private key and write the resulting enclave to the given path. Note that online signatures are inherently insecure.

pub fn gendata( &mut self, unsigned_enclave: impl AsRef<Path>, config_file: impl AsRef<Path>, output_datafile: impl AsRef<Path>, ) -> Command

Generate the command to create the data required for offline signing, and write it to the given output data path.

pub fn catsig( &mut self, unsigned_enclave: impl AsRef<Path>, config_file: impl AsRef<Path>, public_key_pem: impl AsRef<Path>, enclave_signing_material: impl AsRef<Path>, signature: impl AsRef<Path>, output_enclave: impl AsRef<Path>, ) -> Command

Combine an unsigned enclave and signature into the output enclave, after checking the signature.

pub fn dump( &mut self, signed_enclave: impl AsRef<Path>, css_file_path: impl AsRef<Path>, dump_file_path: impl AsRef<Path>, ) -> Command

Examine a signed enclave file and dump the data

Trait Implementations

impl Clone for SgxSign

fn clone(&self) -> SgxSign

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SgxSign

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SgxSign

fn default() -> Self

Create a new SGX signing utility from the current environment.

impl From<PathBuf> for SgxSign

Construct a new SgxSign utility around the given executable path

fn from(sgx_sign_path: PathBuf) -> Self

Converts to this type from the input type.