enclave

Documentation

Index

• type Acquirer
• type Enclave
  • func New(hexKey string) *Enclave
  • func (e Enclave) IsKeyHandle(credID []byte) (ok bool, kh KeyHandle)
  • func (e Enclave) NewKeyHandle() (_ KeyHandle, err error)
• type KeyHandle

Types

type Acquirer

type Acquirer interface {
	NewKeyHandle() (kh KeyHandle, err error)
	IsKeyHandle(id []byte) (yes bool, kh KeyHandle)
}

Acquirer is a secure enclave interface.

var (
	Store Acquirer // Store is the default secure enclave created by pkg init.
)

type Enclave

type Enclave struct {
	crpt.Cipher
}

Enclave is secure enclave.

func New

func New(hexKey string) *Enclave

New creates a new Enclave.

func (Enclave) IsKeyHandle

func (e Enclave) IsKeyHandle(credID []byte) (ok bool, kh KeyHandle)

IsKeyHandle tells if given byte slice really is key handle from the current Enclave.

func (Enclave) NewKeyHandle

func (e Enclave) NewKeyHandle() (_ KeyHandle, err error)

NewKeyHandle creates a new key handle for the Enclave. The Enclave is stateless, which means that only the master key is needed. The master key is stored to every key handle to maintain statelessness.

type KeyHandle

type KeyHandle interface {
	ID() []byte
	CBORPublicKey() ([]byte, error)
	Sign(d []byte) ([]byte, error)

	Verify(data, sig []byte) (ok bool) // Mainly testing
}