server

Documentation

Index

• Constants
• func DirectWrap(optsdata []byte, key_path string) ([]byte, error)
• type AnnotationPacket
• type AzureInformation
• type DecryptConfig
• type EncryptConfig
• type KeyProviderProtocolOutput
• type KeyUnwrapParams
• type KeyUnwrapResults
• type KeyWrapParams
• type KeyWrapResults
• type RSAKeyInfo
• type Server
  • func (s *Server) GetReport(c context.Context, in *keyprovider.KeyProviderGetReportInput) (*keyprovider.KeyProviderGetReportOutput, error)
  • func (s *Server) SayHello(ctx context.Context, in *keyprovider.HelloRequest) (*keyprovider.HelloReply, error)
  • func (s *Server) UnWrapKey(c context.Context, grpcInput *keyprovider.KeyProviderKeyWrapProtocolInput) (*keyprovider.KeyProviderKeyWrapProtocolOutput, error)
  • func (s *Server) WrapKey(c context.Context, grpcInput *keyprovider.KeyProviderKeyWrapProtocolInput) (*keyprovider.KeyProviderKeyWrapProtocolOutput, error)

Constants

const (
	ATTESTATION_AGENT = "skr"
)

Functions

func DirectWrap

func DirectWrap(optsdata []byte, key_path string) ([]byte, error)

Types

type AnnotationPacket

type AnnotationPacket struct {
	Kid              string `json:"kid"`
	WrappedData      []byte `json:"wrapped_data"`
	Iv               []byte `json:"iv,omitempty"`
	WrapType         string `json:"wrap_type,omitempty"`
	KmsEndpoint      string `json:"kms_endpoint,omitempty"`
	AttesterEndpoint string `json:"attester_endpoint,omitempty"`
}

type AzureInformation

type AzureInformation struct {
	// Endpoint of the certificate cache service from which
	// the certificate chain endorsing hardware attestations
	// can be retrieved. This is optional only when the container
	// will expose attest/maa and key/release APIs.
	CertFetcher attest.CertFetcher `json:"certcache,omitempty"`
	// Identifier of the managed identity to be used
	// for authenticating with AKV. This is optional and
	// useful only when the container group has been assigned
	// more than one managed identity.
	Identity common.Identity `json:"identity,omitempty"`
}

type DecryptConfig

type DecryptConfig struct {
	Parameters map[string][]string
}

type EncryptConfig

type EncryptConfig struct {
	Parameters map[string][]string
	Dc         DecryptConfig
}

type KeyProviderProtocolOutput

type KeyProviderProtocolOutput struct {
	// KeyWrapResult encodes the results to key wrap if operation is to wrap
	KeyWrapResults KeyWrapResults `json:"keywrapresults,omitempty"`
	// KeyUnwrapResult encodes the result to key unwrap if operation is to unwrap
	KeyUnwrapResults KeyUnwrapResults `json:"keyunwrapresults,omitempty"`
}

type KeyUnwrapParams

type KeyUnwrapParams struct {
	Dc         DecryptConfig `json:"dc,omitempty"`
	Annotation string        `json:"annotation"`
}

type KeyUnwrapResults

type KeyUnwrapResults struct {
	OptsData []byte `json:"optsdata"`
}

type KeyWrapParams

type KeyWrapParams struct {
	Ec       EncryptConfig `json:"ec,omitempty"`
	Optsdata string        `json:"optsdata,omitempty"`
}

type KeyWrapResults

type KeyWrapResults struct {
	Annotation []byte `json:"annotation"`
}

type RSAKeyInfo

type RSAKeyInfo struct {
	PublicKeyPath    string `json:"public_key_path"`
	KmsEndpoint      string `json:"kms_endpoint"`
	AttesterEndpoint string `json:"attester_endpoint"`
}

type Server

type Server struct {
	keyprovider.UnimplementedKeyProviderServiceServer
	ServerCertState       *attest.CertState
	EncodedUvmInformation *common.UvmInformation
	Azure_info            *AzureInformation
}

func (*Server) GetReport

func (s *Server) GetReport(c context.Context, in *keyprovider.KeyProviderGetReportInput) (*keyprovider.KeyProviderGetReportOutput, error)

func (*Server) SayHello

func (s *Server) SayHello(ctx context.Context, in *keyprovider.HelloRequest) (*keyprovider.HelloReply, error)

func (*Server) UnWrapKey

func (s *Server) UnWrapKey(c context.Context, grpcInput *keyprovider.KeyProviderKeyWrapProtocolInput) (*keyprovider.KeyProviderKeyWrapProtocolOutput, error)

func (*Server) WrapKey

func (s *Server) WrapKey(c context.Context, grpcInput *keyprovider.KeyProviderKeyWrapProtocolInput) (*keyprovider.KeyProviderKeyWrapProtocolOutput, error)