Crate occlum_sgx

source ·
Expand description

Generate and verify SGXQuote with Occlum DCAP

RFC: https://download.01.org/intel-sgx/sgx-dcap/1.16/linux/docs/Intel_SGX_ECDSA_QuoteLibReference_DCAP_API.pdf

Generate SGXQuote

ⓘ
use occlum_sgx::SGXQuote;
let quote: SGXQuote = [0u8; 64].try_into().unwrap();
// or
let quote = SGXQuote::from_report_data(&[0u8; 64]).unwrap();
// convert to &[u8] and send to remote for verification
let quote_buf = quote.as_slice();

Verify SGXQuote on remote

ⓘ
use occlum_sgx::SGXQuote;
let quote_buf: &[u8] = ...;
let quote = SGXQuote::from_slice(quote_buf).unwrap();
// verify quote
quote.verify().unwrap();
// check report data
assert_eq!(quote.report_data(), &[0u8; 64]);
// and check measurement data if required
assert_eq!(
    quote.mrsigner(),
    SGXMeasurement::from_hex("538c416a279b18e54f719d6332af1bc95082d4ef79153fb8c6a31ef70957d82b").unwrap()
);
...

Structs

Enums

Type Definitions