AttestationResult Class

Represents the claims returned from the attestation service as a result of a call to attest_sgx_enclave, or attest_open_enclave.

Inheritance

builtins.object

AttestationResult

Constructor

AttestationResult(**kwargs: Any)

Parameters

issuer

str

Entity which issued the attestation token.

unique_identifier

str or None

Unique identifier for the token.

nonce

str or None

Returns the input nonce attribute passed to the Attest API.

version

str

Version of the token. Must be "1.0"

runtime_claims

dict or None

Runtime claims passed in from the caller of the attest API.

inittime_claims

dict or None

Inittime claims passed in from the caller of the attest API.

enclave_held_data

bytes or None

Runtime data passed in from the caller of the attest API.

policy_claims

dict or None

Attestation claims issued by policies.

verifier_type

str

Verifier which generated this token.

policy_signer

AttestationSigner or None

If the policy which processed the request is signed, this will be the certificate which signed the policy.

policy_hash

str

The hash of the policy which processed the attestation evidence.

is_debuggable

bool

True if a debugger can be attached to the SGX enclave being attested.

product_id

int

Product ID for the SGX enclave being attested.

mr_enclave

str

MRENCLAVE value for the SGX enclave being attested.

mr_signer

str

MRSIGNER value for the SGX enclave being attested.

svn

int

Security version number for the SGX enclave being attested.

sgx_collateral

dict

Collateral which identifies the collateral used to create the token.

Attributes

enclave_held_data

Returns the value of the runtime_data field specified as an input to the attest_sgx_enclave or attest_open_enclave API.

Note

The enclave_held_data property will only be populated if the

runtime_data parameter to the Attest API is specified.

Return type

bytes,

None

inittime_claims

Returns the inittime claims in the token.

This value will match the input inittime_json property to the attest_sgx_enclave or attest_open_enclave API.

Note

The inittime_claims property will only be populated if the

inittime_json parameter to the Attest API is specified. It will

not be populated if the inittime_data parameter is specified.

Return type

dict[str, <xref:Any>],

None

is_debuggable

Returns "True" if the source evidence being attested indicates that the TEE has debugging enabled.

Return type

bool

issuer

Returns the issuer of the attestation token.

The issuer for the token MUST be the same as the endpoint associated with the AttestationClient object. If it is not, then the token should be rejected.

See RFC 7519 Section 4.1.1 for details.

Return type

str

mr_enclave

Returns HEX encoded mr-enclave value of the SGX enclave being attested.

Return type

str

mr_signer

Returns HEX encoded mr-signer value of the SGX enclave being attested.

Return type

str

nonce

Returns the value of the "nonce" input to the attestation request.

Return type

str,

None

policy_claims

Returns the claims for the token generated by attestation policy.

Return type

dict[str, <xref:Any>],

None

policy_hash

Returns the base64url encoded SHA256 hash of the base64url encoded attestation policy which was applied when generating this token.

Return type

str

policy_signer

Returns the signing certificate which was used to sign the policy which was applied when the token was generated.

Return type

AttestationSigner,

None

product_id

Returns the product id associated with the SGX enclave being attested.

Return type

float

runtime_claims

Returns the runtime claims in the token.

This value will match the input runtime_json property to the attest_sgx_enclave or attest_open_enclave API.

Note

The runtime_claims property will only be populated if the

runtime_json parameter to the Attest API is specified. It will

not be populated if the runtime_data parameter is specified.

Return type

dict[str, <xref:Any>],

None

sgx_collateral

Returns a set of information describing the complete set of inputs to the oe_verify_evidence

Return type

dict[str, <xref:Any>]

svn

Returns the svn value of the SGX enclave being attested.

Return type

int

unique_id

Returns a unique ID claim for the attestation token.

If present, the unique_id property can be used to distinguish between different attestation tokens.

See RFC 7519 Section 4.1.7 for details.

Return type

str,

None

verifier_type

Returns the verifier which generated this attestation token.

Return type

str

version

Returns the version of the information returned in the token.

Return type

str