mirror of
https://github.com/corda/corda.git
synced 2025-01-01 02:36:44 +00:00
83d6a248a8
* ENT-970 - SGX remote attestation host
* Remote attestation enclave
* Client for the remote attestation host
* Communicates with ISV / RA server, which in turn communicates with
the Intel Attestation Service
* Native library bridging the client code running on the JVM with
the native bits controlling and communicating with the enclave
* ENT-970 - Address comments from code review
* ENT-970 - More updates addressing review comments
* ENT-970 - Integrate with root Gradle project for SGX
56 lines
1.7 KiB
C++
56 lines
1.7 KiB
C++
#ifndef __ENCLAVE_MANAGER_H__
|
|
#define __ENCLAVE_MANAGER_H__
|
|
|
|
#include <sgx_capable.h>
|
|
#include <sgx_urts.h>
|
|
|
|
/**
|
|
* Instantiate a new enclave from a signed enclave binary, and return the
|
|
* identifier of the instance.
|
|
*
|
|
* @param path The file name of the signed enclave binary to load.
|
|
* @param use_platform_services If true, Intel's platform services are used to
|
|
* add extra protection against replay attacks during nonce generation and to
|
|
* provide a trustworthy monotonic counter.
|
|
* @param result Variable receiving the result of the operation, if not NULL.
|
|
* @param token Pointer to launch token; cannot be NULL.
|
|
*
|
|
* @return The identifier of the created enclave.
|
|
*/
|
|
sgx_enclave_id_t create_enclave(
|
|
const char *path,
|
|
bool use_platform_services,
|
|
sgx_status_t *result,
|
|
sgx_launch_token_t *token
|
|
);
|
|
|
|
/**
|
|
* Destroy enclave if currently loaded.
|
|
*
|
|
* @param enclave_id The identifier of the enclave to destroy.
|
|
*
|
|
* @return True if the enclave was active and got destroyed. False otherwise.
|
|
*/
|
|
bool destroy_enclave(
|
|
sgx_enclave_id_t enclave_id
|
|
);
|
|
|
|
/**
|
|
* Check the status of the SGX device on the current machine.
|
|
*/
|
|
sgx_device_status_t get_device_status(void);
|
|
|
|
/**
|
|
* Report which extended Intel EPID Group the client uses by default. The key
|
|
* used to sign a Quote will be a member of the extended EPID Group reported in
|
|
* this API. The application will typically use this value to tell the ISV
|
|
* Service Provider which group to use during remote attestation.
|
|
*
|
|
* @param result Variable receiving the result of the operation, if not NULL.
|
|
*
|
|
* @return The extended EPID group identifier.
|
|
*/
|
|
uint32_t get_extended_group_id(sgx_status_t *result);
|
|
|
|
#endif /* __ENCLAVE_MANAGER_H__ */
|