s390_pv - library for pv-tools

This library is intended to be used by tools and libraries that are used for creating and managing IBM Secure Execution guests. pv provides abstraction layers for encryption, secure memory management, and accessing the uvdevice.

If your project is not targeted to provide tooling for and/or managing of IBM Secure execution guests, do not use this crate.

OpenSSL 1.1.0+ is required

If you do not need any OpenSSL features use s390_pv_core. This crate reexports all symbols from s390_pv_core. If your project uses this crate do not include s390_pv_core as well.

Import crate

The recommended way of importing this crate is:

cargo add s390_pv --rename pv

lib.rs:

Manage guest secret store

This crate provides functionalities for creating add-secret requests. Also provides support for sending those requests, list all stored secrets, and lock the secret store.

Create

secret::AddSecretRequest

Add

uv::UvDevice and uv::AddCmd

List

uv::UvDevice and uv::ListCmd

Lock

uv::UvDevice and uv::LockCmd

Attestation

This crate provides functionalities for creating, performing, and verifying Attestation measurements for IBM Secure Execution for Linux. See:

Create

attest::AttestationRequest

Perform

uv::UvDevice and uv::AttestationCmd

Verify

attest::AttestationItems, attest::AttestationMeasurement