ssgx_utils_t_seal_handler.h

Go to the documentation of this file.

#ifndef SAFEHERON_SGX_TRUSTED_SEAL_HANDLER_H
#define SAFEHERON_SGX_TRUSTED_SEAL_HANDLER_H
 
#include <cstdint>
#include <optional>
#include <string>
#include <vector>
 
#include "sgx_attributes.h"
#include "sgx_key.h"
 
namespace ssgx {
namespace utils_t {
 
struct UnsealedData {
    std::vector<uint8_t> additional_mac_text{}; 
    std::vector<uint8_t> decrypted_text{};      
};
 
class SealHandler {
  private:
    uint16_t key_policy_;                      
    sgx_attributes_t attribute_mask_{};        
    sgx_misc_select_t misc_mask_;              
    std::vector<uint8_t> additional_mac_text_{}; 
    std::string last_error_;                   
 
  public:
    explicit SealHandler(uint16_t key_policy = SGX_KEYPOLICY_MRENCLAVE);
 
    [[maybe_unused]] void SetAttributeMask(sgx_attributes_t attribute_mask) {
        attribute_mask_ = attribute_mask;
    }
 
    [[maybe_unused]] void SetMiscMask(sgx_misc_select_t misc_mask) {
        misc_mask_ = misc_mask;
    }
 
    void SetAdditionalMacText(const uint8_t* mac_text, uint32_t length) {
        additional_mac_text_.assign(mac_text, mac_text + length);
    }
 
    std::optional<std::vector<uint8_t>> SealData(const std::vector<uint8_t>& text_to_encrypt);
 
    std::optional<std::vector<uint8_t>> SealData(const uint8_t* text_to_encrypt, uint32_t length);
 
    std::optional<UnsealedData> UnsealData(const std::vector<uint8_t>& sealed_data);
 
    std::optional<UnsealedData> UnsealData(const uint8_t* sealed_data, uint32_t length);
 
    [[nodiscard]] std::string GetLastError() const {
        return last_error_;
    }
};
 
} // namespace utils_t
} // namespace ssgx
 
#endif // SAFEHERON_SGX_TRUSTED_SEAL_HANDLER_H