enclave {
    include "stdbool.h"
    include "sgx_tcrypto.h"
    include "sgx_tseal.h"

    trusted {
        public void ecall_identity_key_new(
            [out] sgx_ec256_public_t *outpub,
            [out,size=611] sgx_sealed_data_t *outsealedpriv);

        public bool ecall_identity_key_load(
            [out] sgx_ec256_public_t *outpub,
            [in,size=611] const sgx_sealed_data_t *insealedpriv);
    };

    untrusted {
        void ocall_print_string([in, string] const char *str);
        unsigned long ocall_print_string_with_rtclock(
            [in, string] const char *str);
        unsigned long ocall_print_string_with_rtclock_diff(
            [in, string] const char *str, unsigned long before);
    };
};