Expand description
TEE (Trusted Execution Environment) abstraction layer for Tenzro Network.
This crate provides a unified interface for working with different TEE technologies:
- Intel TDX (Trust Domain Extensions)
- AMD SEV-SNP (Secure Encrypted Virtualization - Secure Nested Paging)
- AWS Nitro Enclaves
The abstraction allows Tenzro Network to leverage confidential computing across different hardware platforms while maintaining a consistent API.
Re-exports§
pub use error::TeeError;pub use error::Result;pub use traits::TeeProvider;pub use detection::detect_tee;pub use registry::TeeRegistry;pub use attestation::AttestationVerifier;pub use attestation::ParsedCertificate;pub use attestation::parse_x509_certificate;pub use attestation::verify_certificate_signature;pub use sealed_agent_keypair::attest_agent_key;pub use sealed_agent_keypair::pack_user_data_for_vendor;pub use sealed_agent_keypair::rotate_agent_key;pub use sealed_agent_keypair::seal_agent_keypair;pub use sealed_agent_keypair::AgentKeyAttestationPacket;pub use sealed_agent_keypair::AgentKeyHandle;pub use sealed_secp256k1::SealedSecp256k1Key;pub use intel_tdx::IntelTdxProvider;pub use amd_sev_snp::AmdSevSnpProvider;pub use aws_nitro::AwsNitroProvider;pub use nvidia_gpu::NvidiaGpuProvider;pub use intel_tiber::claims_to_attestation_result;pub use intel_tiber::AttestRequest as TiberAttestRequest;pub use intel_tiber::IntelTiberClient;pub use intel_tiber::TiberClaims;pub use intel_tiber::TiberJwksPin;pub use intel_tiber::TokenSigningAlg as TiberTokenSigningAlg;pub use intel_tiber::VerifierNonce as TiberVerifierNonce;pub use intel_tiber::ATTEST_PATH as TIBER_ATTEST_PATH;pub use intel_tiber::NONCE_PATH as TIBER_NONCE_PATH;pub use intel_tiber::TIBER_API_URL_EU;pub use intel_tiber::TIBER_API_URL_US;
Modules§
- amd_
sev_ snp - AMD SEV-SNP (Secure Encrypted Virtualization - Secure Nested Paging) provider for Tenzro Network.
- attestation
- Attestation verification utilities for Tenzro Network.
- aws_
nitro - AWS Nitro Enclaves provider for Tenzro Network.
- certs
- Pinned vendor root certificates for TEE attestation verification.
- detection
- TEE hardware detection for Tenzro Network.
- enclave_
crypto - Shared AES-256-GCM encryption for TEE enclave operations.
- enclave_
keystore - Real enclave-key storage shared by all TEE provider implementations.
- error
- Error types for the Tenzro Network TEE module.
- intel_
tdx - Intel TDX (Trust Domain Extensions) provider for Tenzro Network.
- intel_
tiber - Intel Tiber Trust Authority (ITA) integration for Tenzro Network.
- nvidia_
gpu - NVIDIA GPU Confidential Computing TEE provider
- registry
- TEE provider registry for Tenzro Network.
- sealed_
agent_ keypair - TEE-resident agent keypairs for ERC-8004 / TDIP machine identities.
- sealed_
secp256k1 - TEE-sealed secp256k1 signing keys for production EVM signers.
- traits
- Core TEE abstraction traits for Tenzro Network.
Structs§
- Attestation
Metadata - Additional metadata for attestation verification
- Attestation
Report - A TEE attestation report
- Attestation
Result - Result of attestation verification
- Enclave
KeyHandle - Handle to a cryptographic key stored inside a TEE enclave
- Enclave
Request - Request to execute an operation inside a TEE enclave
- Enclave
Response - Response from a TEE enclave operation
- KeyGen
Params - Parameters for generating a key inside a TEE enclave
- Measurement
- A measurement from a TEE attestation
- TeeCapacity
- TEE provider capacity information
- TeeProvider
Info - Information about a TEE provider
- TeeProvider
Pricing - TEE provider pricing configuration
Enums§
- KeyAlgorithm
- Cryptographic algorithms supported for enclave key generation
- KeyPurpose
- Purpose of a cryptographic key
- TeeProvider
Status - TEE provider operational status
- TeeVendor
- Supported TEE vendors on Tenzro Network