{"id":50844532,"url":"https://github.com/godaddy/hardware-enclave","last_synced_at":"2026-06-14T08:33:45.678Z","repository":{"id":351169903,"uuid":"1209776741","full_name":"godaddy/hardware-enclave","owner":"godaddy","description":"Shared Rust crate for hardware-backed key management (macOS Secure Enclave / Windows TPM 2.0)","archived":false,"fork":false,"pushed_at":"2026-06-11T02:53:10.000Z","size":101547,"stargazers_count":1,"open_issues_count":0,"forks_count":1,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-06-14T08:33:45.106Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/godaddy.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":"THREAT_MODEL.md","audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"AGENTS.md","dco":null,"cla":null}},"created_at":"2026-04-13T19:13:59.000Z","updated_at":"2026-06-11T02:52:48.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/godaddy/hardware-enclave","commit_stats":null,"previous_names":["godaddy/libenclaveapp","godaddy/enclave","godaddy/hardware-enclave"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/godaddy/hardware-enclave","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/godaddy%2Fhardware-enclave","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/godaddy%2Fhardware-enclave/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/godaddy%2Fhardware-enclave/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/godaddy%2Fhardware-enclave/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/godaddy","download_url":"https://codeload.github.com/godaddy/hardware-enclave/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/godaddy%2Fhardware-enclave/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34315072,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-14T02:00:07.365Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2026-06-14T08:33:45.621Z","updated_at":"2026-06-14T08:33:45.672Z","avatar_url":"https://github.com/godaddy.png","language":"Rust","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Enclave\n\nHardware-backed signing, encryption, and in-process memory protection for Rust.\n\nSupports macOS (Secure Enclave), Windows (TPM 2.0), Linux (TPM 2.0 / keyring),\nand WSL2. Private keys never leave the hardware. Touch ID and Windows Hello\nare built in.\n\n## Using the `enclave` crate\n\nThe [`enclave`](crates/enclave/) crate is the public API — hardware key management,\nFIDO2 security keys, tamper-evident files, and guard-paged memory protection.\n\n**→ [crates/enclave/README.md](crates/enclave/README.md) — start here**\n\n```toml\n[dependencies]\nenclave = \"0.1\"\n```\n\n## Building wrapper applications\n\nIf you are building an application that wraps a third-party tool and injects\nhardware-backed secrets into it, see the delivery tier guide:\n\n**→ [crates/enclave/DELIVERY_TIERS.md](crates/enclave/DELIVERY_TIERS.md)**\n\nCovers: SSH agent protocol, environment variable injection, temp file delivery,\nand credential source patterns — with guidance on when to use each.\n\n## Security\n\nSee [crates/enclave/THREAT_MODEL.md](crates/enclave/THREAT_MODEL.md) for the\nfull threat model, limitations, and residual risks.\n\nReport vulnerabilities to security@godaddy.com or\n[HackerOne](https://hackerone.com/godaddy).\n\n## Workspace crates\n\nThe `enclave` crate is the public interface. The `enclaveapp-*` crates are\ninternal platform implementations.\n\n| Crate | Role |\n|---|---|\n| **[enclave](crates/enclave/)** | Public API — the crate consumers import |\n| [enclaveapp-app-storage](crates/enclaveapp-app-storage/) | Platform-detected signing / encryption |\n| [enclaveapp-app-adapter](crates/enclaveapp-app-adapter/) | Secret delivery substrate |\n| [enclaveapp-apple](crates/enclaveapp-apple/) | macOS Secure Enclave (CryptoKit Swift bridge) |\n| [enclaveapp-windows](crates/enclaveapp-windows/) | Windows TPM 2.0 (CNG) |\n| [enclaveapp-linux-tpm](crates/enclaveapp-linux-tpm/) | Linux TPM 2.0 (tss-esapi) |\n| [enclaveapp-keyring](crates/enclaveapp-keyring/) | Linux keyring-encrypted P-256 keys |\n| [enclaveapp-bridge](crates/enclaveapp-bridge/) | JSON-RPC bridge protocol + WSL client |\n| [enclaveapp-tpm-bridge](crates/enclaveapp-tpm-bridge/) | Shared TPM bridge server |\n| [enclaveapp-wsl](crates/enclaveapp-wsl/) | WSL detection, distro config |\n| [enclaveapp-core](crates/enclaveapp-core/) | Traits, types, metadata, utilities |\n| [enclaveapp-cache](crates/enclaveapp-cache/) | Shared binary cache format |\n\n## Building\n\nRequires Rust 1.75+. macOS builds require Xcode (Swift bridge compilation).\n\n```bash\ncargo build --workspace\ncargo test --workspace\n```\n\n## License\n\nMIT — Copyright 2026 Jay Gowdy\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgodaddy%2Fhardware-enclave","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgodaddy%2Fhardware-enclave","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgodaddy%2Fhardware-enclave/lists"}