sigil-node · tee_verify::sev_snp

Source: sigil/node/sigil-node/src/tee_verify/sev_snp.rs. SHA-256: f3dc7ce356f8bd64a952a51db09ae3ef7a8084c86dce103b1b6104f924cbfc94.

This reference follows declared source modules, retains conditional attributes, and includes public declarations and implementation methods. Private-module re-exports and trait resolution require the compiler; this is a source reference, not a claim that every listed item is a root import. Function bodies and constant values are omitted.

Module condition:

#[cfg(feature = "tee-verify")]

tee_verify::sev_snp::SevSnpVerifier

Default verifier (no anchors). Fails closed for every well-formed attestation with FixtureMaterialRequired — preserves Phase 13 behaviour for builds that don't enable tee-verify-sev-snp or that leave sev_snp_trust_anchors = None in genesis.

#[cfg(feature = "tee-verify")]
#[derive(Default)]
pub struct SevSnpVerifier {

}

Source line: 127.

tee_verify::sev_snp::SevSnpVerifier::with_anchors

Construct a real-verification SevSnpVerifier. The verifier accepts a report iff its signature verifies against one of anchors.acceptable_vcek_pubkeys AND the report's MEASUREMENT field is on anchors.measurement_allowlist.

#[cfg(feature = "tee-verify")]
#[cfg(feature = "tee-verify-sev-snp")]
pub fn with_anchors(anchors: SevSnpTrustAnchors) -> Self;

Source line: 138.