Asylo
sgx_local_assertion_generator.h
Go to the documentation of this file.
1 /*
2  *
3  * Copyright 2018 Asylo authors
4  *
5  * Licensed under the Apache License, Version 2.0 (the "License");
6  * you may not use this file except in compliance with the License.
7  * You may obtain a copy of the License at
8  *
9  * http://www.apache.org/licenses/LICENSE-2.0
10  *
11  * Unless required by applicable law or agreed to in writing, software
12  * distributed under the License is distributed on an "AS IS" BASIS,
13  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14  * See the License for the specific language governing permissions and
15  * limitations under the License.
16  *
17  */
18 
19 #ifndef ASYLO_IDENTITY_SGX_SGX_LOCAL_ASSERTION_GENERATOR_H_
20 #define ASYLO_IDENTITY_SGX_SGX_LOCAL_ASSERTION_GENERATOR_H_
21 
22 #include "asylo/identity/enclave_assertion_generator.h"
23 
24 #include "absl/synchronization/mutex.h"
25 #include "asylo/identity/sgx/local_assertion.pb.h"
26 
27 namespace asylo {
28 
29 /// An implementation of the EnclaveAssertionGenerator interface for SGX local
30 /// assertions.
31 ///
32 /// An SgxLocalAssertionGenerator is capable of generating assertion offers and
33 /// assertions for SGX code identities that can be verified by SGX enclaves
34 /// running within the same local attestation domain.
35 class SgxLocalAssertionGenerator final : public EnclaveAssertionGenerator {
36  public:
37  /// Constructs an uninitialized SgxLocalAssertionGenerator.
38  ///
39  /// The generator can be initialized via a call to Initialize().
41 
42  ///////////////////////////////////////////
43  // From AssertionAuthority interface. //
44  ///////////////////////////////////////////
45 
46  Status Initialize(const std::string &config) override;
47 
48  bool IsInitialized() const override;
49 
50  EnclaveIdentityType IdentityType() const override;
51 
52  std::string AuthorityType() const override;
53 
54  ///////////////////////////////////////////
55  // From AssertionGenerator interface. //
56  ///////////////////////////////////////////
57 
59 
60  StatusOr<bool> CanGenerate(const AssertionRequest &request) const override;
61 
63  Assertion *assertion) const override;
64 
65  private:
66  // Parses additional information from the given |request|. Returns the
67  // LocalAssertionRequestAdditionalInfo on success. Returns a non-OK status on
68  // parsing failure.
69  StatusOr<sgx::LocalAssertionRequestAdditionalInfo> ParseAdditionalInfo(
70  const AssertionRequest &request) const;
71 
72  // The identity type handled by this generator.
73  static constexpr EnclaveIdentityType identity_type_ = CODE_IDENTITY;
74 
75  // The authority type handled by this generator.
76  static const char *const authority_type_;
77 
78  // The attestation domain to which the enclave belongs.
79  std::string attestation_domain_;
80 
81  // Indicates whether this generator has been initialized.
82  bool initialized_ GUARDED_BY(initialized_mu_);
83 
84  // A mutex that guards the initialized_ member.
85  mutable absl::Mutex initialized_mu_;
86 };
87 
88 } // namespace asylo
89 
90 #endif // ASYLO_IDENTITY_SGX_SGX_LOCAL_ASSERTION_GENERATOR_H_
Status Initialize(const std::string &config) override
Initializes this assertion authority using the provided config.
Status CreateAssertionOffer(AssertionOffer *offer) const override
Creates an assertion offer compatible with this generator&#39;s identity type and authority type and plac...
SgxLocalAssertionGenerator()
Constructs an uninitialized SgxLocalAssertionGenerator.
StatusOr< bool > CanGenerate(const AssertionRequest &request) const override
Indicates whether the assertion requested in request can be generated by this generator.
Status Generate(const std::string &user_data, const AssertionRequest &request, Assertion *assertion) const override
Generates an assertion that satisfies the given request, if request is compatible with this generator...
std::string AuthorityType() const override
Gets the type of this assertion authority.
EnclaveIdentityType IdentityType() const override
Gets the enclave identity type handled by this assertion authority.
bool IsInitialized() const override
Indicates whether this assertion authority has been initialized successfully via a call to Initialize...
Definition: aes_gcm_siv.h:37