Skip to main content

decentriq_platform.attestation

Variables​

enclave_specifications: decentriq_platform.attestation.EnclaveSpecifications : The main catalogue of enclave specifications available within the Decentriq platform.

Classes​

AdformDspWorkerConfiguration​

AdformDspWorkerConfiguration(
    *args,
    **kwargs,
)

A ProtocolMessage

Ancestors (in MRO)

  • google._upb._message.Message
  • google.protobuf.message.Message

AttestationSpecification​

AttestationSpecification(
    *args,
    **kwargs,
)

A ProtocolMessage

Ancestors (in MRO)

  • google._upb._message.Message
  • google.protobuf.message.Message

AttestationSpecificationAmdSnp​

AttestationSpecificationAmdSnp(
    *args,
    **kwargs,
)

A ProtocolMessage

Ancestors (in MRO)

  • google._upb._message.Message
  • google.protobuf.message.Message

AttestationSpecificationIntelDcap​

AttestationSpecificationIntelDcap(
    *args,
    **kwargs,
)

A ProtocolMessage

Ancestors (in MRO)

  • google._upb._message.Message
  • google.protobuf.message.Message

AttestationSpecificationIntelDcapMrsigner​

AttestationSpecificationIntelDcapMrsigner(
    *args,
    **kwargs,
)

A ProtocolMessage

Ancestors (in MRO)

  • google._upb._message.Message
  • google.protobuf.message.Message

AzureBlobStorageWorkerConfiguration​

AzureBlobStorageWorkerConfiguration(
    *args,
    **kwargs,
)

A ProtocolMessage

Ancestors (in MRO)

  • google._upb._message.Message
  • google.protobuf.message.Message

ContainerWorkerConfiguration​

ContainerWorkerConfiguration(
    *args,
    **kwargs,
)

A ProtocolMessage

Ancestors (in MRO)

  • google._upb._message.Message
  • google.protobuf.message.Message

DataSourceS3WorkerConfiguration​

DataSourceS3WorkerConfiguration(
    *args,
    **kwargs,
)

A ProtocolMessage

Ancestors (in MRO)

  • google._upb._message.Message
  • google.protobuf.message.Message

DataSourceSnowflakeWorkerConfiguration​

DataSourceSnowflakeWorkerConfiguration(
    *args,
    **kwargs,
)

A ProtocolMessage

Ancestors (in MRO)

  • google._upb._message.Message
  • google.protobuf.message.Message

DatasetSinkWorkerConfiguration​

DatasetSinkWorkerConfiguration(
    *args,
    **kwargs,
)

A ProtocolMessage

Ancestors (in MRO)

  • google._upb._message.Message
  • google.protobuf.message.Message

DriverTaskConfig​

DriverTaskConfig(
    *args,
    **kwargs,
)

A ProtocolMessage

Ancestors (in MRO)

  • google._upb._message.Message
  • google.protobuf.message.Message

EnclaveSpecifications​

EnclaveSpecifications(
    specifications: Dict[str, decentriq_platform.types.EnclaveSpecification],
)

Provider of the available enclave specifications provided by the Decentriq platform.

Enclave specifications enable you to express which particular enclaves you trust. The field containing the measurement (e.g. mrenclave in the case of Intel SGX) identifies the exact binary that will process your data. Users of the Decentriq platform are encouraged to reproduce this value by building the enclave binary from audited source code and re-producing the measurement (in the case of Intel SGX, this would involve simply hashing the produced executable).

When connecting to the driver enclave, the configured attestation algorithm will guarantee that the enclave you connect to is the one corresponding to the enclave specification you chose. The associated root certificate will be used to verify that the attestation was signed by the expected party (e.g. Intel/AMD/Amazon, depending on the CC technology used).

Any communication between the driver enclave and worker enclaves handling your data will also first be secured by additional attestation procedures. Which enclaves are trusted by the driver enclave is controlled by choosing the additional enclave specs from the respective compute packages.

A list of enclave specifications, each encoding your trust in a particular enclave type, can be obtained by selecting a subset of the enclave specifications provided by the object decentriq_platform.enclave_specifications. Selecting the subset of versions should be done by calling its versions method.

all​

def all(
    self,
) ‑> List[decentriq_platform.types.EnclaveSpecification]

Get a list of all available enclave specifications.

latest​

def latest(
    self,
) ‑> Dict[str, decentriq_platform.types.EnclaveSpecification]

Select the latest specification of each enclave type

list​

def list(
    self,
) ‑> List[str]

Get a list of all available enclave identifiers.

merge​

def merge(
    self,
    other,
)

Merge two sets of enclave specifications into a single set.

versions​

def versions(
    self,
    enclave_versions: List[str],
) ‑> Dict[str, decentriq_platform.types.EnclaveSpecification]

Get the enclave specifications for the given versioned enclave types.

Make sure to always include the specification of a driver enclave, e.g. "decentriq.driver:v1" as this is the node with which you communicate directly. Add additional versioned enclaves depending on the compute module you use. Refer to the main documentation page of each compute module to learn which enclaves are available.

GoogleAdManagerWorkerConfiguration​

GoogleAdManagerWorkerConfiguration(
    *args,
    **kwargs,
)

A ProtocolMessage

Ancestors (in MRO)

  • google._upb._message.Message
  • google.protobuf.message.Message

GoogleDv360SinkWorkerConfiguration​

GoogleDv360SinkWorkerConfiguration(
    *args,
    **kwargs,
)

A ProtocolMessage

Ancestors (in MRO)

  • google._upb._message.Message
  • google.protobuf.message.Message

MetaSinkWorkerConfiguration​

MetaSinkWorkerConfiguration(
    *args,
    **kwargs,
)

A ProtocolMessage

Ancestors (in MRO)

  • google._upb._message.Message
  • google.protobuf.message.Message

MicrosoftDspWorkerConfiguration​

MicrosoftDspWorkerConfiguration(
    *args,
    **kwargs,
)

A ProtocolMessage

Ancestors (in MRO)

  • google._upb._message.Message
  • google.protobuf.message.Message

PermutiveWorkerConfiguration​

PermutiveWorkerConfiguration(
    *args,
    **kwargs,
)

A ProtocolMessage

Ancestors (in MRO)

  • google._upb._message.Message
  • google.protobuf.message.Message

PostWorkerConfiguration​

PostWorkerConfiguration(
    *args,
    **kwargs,
)

A ProtocolMessage

Ancestors (in MRO)

  • google._upb._message.Message
  • google.protobuf.message.Message

S3SinkWorkerConfiguration​

S3SinkWorkerConfiguration(
    *args,
    **kwargs,
)

A ProtocolMessage

Ancestors (in MRO)

  • google._upb._message.Message
  • google.protobuf.message.Message

SalesforceWorkerConfiguration​

SalesforceWorkerConfiguration(
    *args,
    **kwargs,
)

A ProtocolMessage

Ancestors (in MRO)

  • google._upb._message.Message
  • google.protobuf.message.Message

SqlWorkerConfiguration​

SqlWorkerConfiguration(
    *args,
    **kwargs,
)

A ProtocolMessage

Ancestors (in MRO)

  • google._upb._message.Message
  • google.protobuf.message.Message