Enclave interactions

A system comprising:

• one or more processors;
• and
• one or more storage devices coupled to the one or more processors and storing instructions that, when executed by the one or more processors, cause the one or more processors to perform operations for establishing a communication channel between an enclave entity and a second entity, the operations comprising:
• receiving, by the enclave entity, a request to initiate the communication channel from the second entity;
• negotiating, by the one or more processors with the second entity, one or more types of assertions of identity to be exchanged between the enclave entity and the second entity;
• negotiating, by the enclave entity with the second entity, a record protocol for the communication channel and a secret key for cryptographically protecting traffic sent over the communication channel;
• and
• in response to negotiating the one or more types of assertions of identity, the record protocol, and the secret key, communicating, by the enclave entity with the second entity, using the record protocol and the secret key to encrypt and authenticate data exchanged over the communication channel.

A non-transitory computer readable medium for storing instructions that, when executed by one or more processors, cause the one or more processors to perform operations for establishing a communication channel between an enclave entity and a second entity, the operations comprising:

• receiving, by the enclave entity, a request to initiate the communication channel from the second entity;
• negotiating, by the one or more processors with the second entity, one or more types of assertions of identity to be exchanged between the enclave entity and the second entity;
• negotiating, by the enclave entity with the second entity, a record protocol for the communication channel and a secret key for cryptographically protecting traffic sent over the communication channel;
• and
• in response to negotiating the one or more types of assertions of identity, the record protocol, and the secret key, communicating, by the enclave entity with the second entity, using the record protocol and the secret key to encrypt and authenticate data exchanged over the communication channel.