This enumeration type defines the policy used to derive a seal key.
This definition is shared by the enclave and the host.
Enumerator |
---|
OE_SEAL_POLICY_UNIQUE | Key is derived from a measurement of the enclave.
Under this policy, the sealed secret can only be unsealed by an instance of the exact enclave code that sealed it.
|
OE_SEAL_POLICY_PRODUCT | Key is derived from the signer of the enclave.
Under this policy, the sealed secret can be unsealed by any enclave signed by the same signer as that of the sealing enclave.
|
_OE_SEAL_POLICY_MAX | Unused.
|