awesome-tee-blockchain

A curated list of resources for learning about Trusted Execution Environments (TEEs) in the context of blockchains.
https://github.com/dineshpinto/awesome-tee-blockchain

Last synced: 15 days ago
JSON representation

Blockchain Applications & Use Cases Leveraging TEEs
- Asset Management & Wallets
  - Website
  - Website
- AI
  - TEE plugin for ELIZA (using dstack from Phala)
- General Off-Chain Compute
  - Website
  - Website - Network GitHub](https://github.com/Phala-Network)
- Rollups & Coprocessors
  - Website
- Block Building & MEV Mitigation
- Bridging
  - Website - labs GitHub](https://github.com/ava-labs)
Hardware
- OpenTitan
  - OpenTitan
Core Concepts & Technologies
- Hardware Platforms
  - lowRISC/opentitan
  - Secure Encrypted Virtualization-Trusted I/O (SEV-TIO) - Improved I/O performance and security in AMD SEV-SNP guests
  - Advanced Matrix Extensions (AMX) - Accelerator to improve the performance of deep-learning training and inference on the CPU
  - Trust Domain Extensions (TDX) - Latest Hardware-based TEE architecture from Intel
  - Hopper Architecture - Accelerated computing platform for AI
  - Confidential Compute Architecture (CCA) - Under development. Key component of the Armv9-A architecture
  - TrustZone - Isolates critical security firmware, assets and private information for Armv8-M based devices
  - Software Guard Extensions (SGX) - Protects data actively being used in the processor and memory by creating a TEE
  - Secure Encrypted Virtualization-Secure Nested Paging (SEV-SNP) - Expands on SEV, adds memory integrity protection to help prevent malicious hypervisor-based attacks
  - Secure Encrypted Virtualization (SEV) - Hardware-based memory encryption through the AMD Secure Processor
  - H100 TensorCore GPU - Hardware-based trusted execution environment with NVIDIA Hopper and NVIDIA Blackwell architecture support
  - Blackwell Architecture - Latest HW generation with accelerated computing and generative AI optimizations
- TEE SDKs & Frameworks
  - intel/linux-sgx - Intel SGX SDK and Platform Software (PSW) for Linux.
  - Gramine Project - Library OS, allowing unmodified Linux applications to run in Intel SGX enclaves.
  - Microsoft/confidential-container-demos - Demos for running containers in confidential environments on Azure.
  - confidential-containers/confidential-containers - An open-source project enabling cloud-native confidential computing by shielding containerized workloads.
  - apache/incubator-teaclave-sgx-sdk - Apache Teaclave (incubating) SGX SDK helps developers write Intel SGX applications in the Rust programming language.
  - openenclave/openenclave - SDK for developing TEE applications (enclaves) across different hardware platforms (SGX, OP-TEE).
- Cloud TEE Offerings
  - Confidential Space - Supports trust model where the workload author, workload operator, and resource owners are separate, mutually distrusting parties.
  - Confidential Accelerator for AI workloads - Supports Intel TDX with Intel AMX, and NVIDIA H100 GPUs.
  - Confidential VMs - Supports AMD SEV, AMD SEV-SNP, and Intel TDX.
  - Confidential VM attestation - Attestation support for AMD SEV (vTPM), AMD SEV-SNP (vTPM and TSM), and Intel TDX (vTPM and TSM).
  - Nitro
  - Nitro Enclaves
  - Azure Confidential VM
Use Cases
- Asset Management
  - Website
  - Website - mobile GitHub](https://github.com/solana-mobile)
- Privacy
  - Website
- General Compute
  - Website - network GitHub](https://github.com/automata-network)
Code Repositories
- Rust
  - Phala-Network/phala-blockchain - The Phala Network Blockchain, pRuntime and the bridge.
  - Dstack-TEE/dstack - Dstack is a developer friendly and security first SDK to simplify the deployment of arbitrary Docker-based apps into TEE.
  - marlinprotocol/oyster-serverless - Oyster Serverless is a cutting-edge, high-performance serverless computing platform designed to securely execute JavaScript (JS) and WebAssembly (WASM) code in a highly controlled environment.
  - kata-containers/kata-containers - Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs.
  - taikoxyz/raiko - Multi-proofs for Taiko. SNARKS, STARKS and Trusted Execution Enclave.
  - confidential-containers/guest-components - Confidential Containers Guest Tools and Components
  - kinvolk/azure-cvm-tooling - Libraries and tools for Confidential Computing on Azure
  - HyperEnclave/hyperenclave - An Open and Cross-platform Trusted Execution Environment.
  - mobilecoinfoundation/mobilecoin - Private payments for mobile devices
  - integritee-network/worker - Integritee off-chain worker and sidechain validateer
  - capsule-corp-ternoa/ternoa-node - Ternoa's Node Implementation
  - automata-network/automata - Automata Network is a modular attestation layer that extends machine trust to Ethereum with TEE Coprocessors.
  - apache/incubator-teaclave - Apache Teaclave (incubating) is an open source universal secure computing platform, making computation on privacy-sensitive data safe and simple.
  - scrtlabs/incubator-teaclave-sgx-sdk - Rust SGX SDK provides the ability to write Intel SGX applications in Rust Programming Language. Fork of `apache/incubator-teaclave-sgx-sdk`.
- Awesome Lists & General Resources
  - orbstack/orbstack - Fast, light, simple Docker containers & Linux machines
  - bpradipt/awesome-confidential-computing - Collection of resources on Confidential Computing
  - erayack/awesome-sgx-blockchain - Awesome SGX and TEE on Blockchain Resources
  - sbellem/qtee - Exploring the physical limits of trusted hardware in the classical and quantum settings to achieve security through physics.
- C
  - pietroborrello/CustomProcessingUnit - The first analysis framework for CPU microcode
  - iisec-suzaki/optee-ra - OP-TEE Remote Attestation
  - deislabs/mystikos - Tools and runtime for launching unmodified container images in Trusted Execution Environments
  - mofanv/PPFL - Privacy-preserving Federated Learning with Trusted Execution Environments
  - inclavare-containers/inclavare-containers - A novel container runtime, aka confidential container, for cloud-native confidential computing and enclave runtime ecosystem.
- Go
  - google/go-tpm-tools - Go packages built on go-tpm providing a high-level API for using TPMs
  - google/go-sev-guest - go-sev-guest offers a library to wrap the /dev/sev-guest device in Linux, as well as a library for attestation verification of fundamental components of an attestation report.
  - google/go-tdx-guest - go-tdx-guest offers a library to wrap the /dev/tdx-guest device in Linux, as well as a library for attestation verification of fundamental components of an attestation quote.
  - matter-labs/vault-auth-tee - Hashicorp Vault plugin for authenticating Trusted Execution Environments (TEE) like SGX enclaves
  - usbarmory/GoTEE - Go Trusted Execution Environment (TEE)
  - iotexproject/w3bstream - An offchain computing layer for DePIN verifiable data computation, supporting a variety of validity proofs including Zero Knowledge (ZK), Trusted Execution Environments (TEE), and Multi-party Computation (MPC)
  - oasisprotocol/oasis-core - Performant and Confidentiality-Preserving Smart Contracts + Blockchains
  - hyperledger/fabric-private-chaincode - FPC enables Confidential Chaincode Execution for Hyperledger Fabric using Intel SGX.
- CPP
  - NixOS/nix - Nix, the purely functional package manager
  - microsoft/azure-tee-attestation-samples - Trusted Execution Environment examples leveraging attestations on Azure
  - lsds/Teechain - Teechain: A Secure Payment Network with Asynchronous Blockchain Access
  - skalenetwork/sgxwallet - sgxwallet is the first-ever opensource high-performance hardware secure crypto wallet that is based on Intel SGX technology. First opensource product on Intel SGX whitelist. Scales to 100,000+ transactions per second. Currently supports ETH and SKALE, and will support BTC in the future. Sgxwallet is under heavy development and use by SKALE network.
  - hyperledger-labs/private-data-objects - The Private Data Objects lab provides technology for confidentiality-preserving, off-chain smart contracts.
- Python
  - ethernity-cloud/mvp-pox-node - Ethernity Cloud Node
- TypeScript
  - tkhq/sdk - Turnkey TypeScript SDK
Learning Resources
Applications in Blockchain
- Rollups
  - Website
- Privacy
  - Website
Videos
- TS
- Python
Articles
- TS
  - Trusted Execution Environments and the Polkadot Ecosystem
  - Verifiable Off-chain Compute - Florin Digital
- Python
  - Trustless Execution Environments - David Atterman
Security Considerations & Attacks
- Rollups & Coprocessors
Community & Events
- TypeScript
  - Blockchains + TEEs Workshop - Academic workshop focused on the intersection of blockchains and TEEs.
  - Confidential Computing Consortium - Linux Foundation project advancing confidential computing.
  - Flashbots Collective Forum - Discussions often touch on TEE usage for MEV mitigation and block building.

Programming Languages

Rust 14 Go 7 C 7 C++ 5 Shell 2 TypeScript 1 Python 1 Solidity 1 SystemVerilog 1

Categories

Learning Resources 60 Code Repositories 38 Core Concepts & Technologies 25 Videos 24 Blockchain Applications & Use Cases Leveraging TEEs 13 Security Considerations & Attacks 5 Use Cases 4 Community & Events 3 Articles 3 Applications in Blockchain 2 Hardware 1

Sub Categories

Research Papers 17 Videos 14 TS 14 Rust 14 Python 14 Technical Deep Dive Articles 13 Hardware Platforms 12 Introductory & Overview Articles 9 Go 8 Cloud TEE Offerings 7 Tweet threads 7 Rollups & Coprocessors 6 Block Building & MEV Mitigation 6 TEE SDKs & Frameworks 6 C 5 CPP 5 TypeScript 4 Awesome Lists & General Resources 4 Privacy 2 Asset Management 2 Asset Management & Wallets 2 General Off-Chain Compute 2 Rollups 1 General Compute 1 OpenTitan 1 AI 1 Bridging 1

Keywords

sgx 8 tee 7 blockchain 6 confidential-computing 4 docker 3 rust 3 trusted-execution-environment 3 tpm2 2 intel-sgx 2 containers 2 universal-secure-computing 2 privacy 2 virtual-machine 2 kubernetes 2 oci 2 linux 2 security 2 azure 1 attestation 1 node 1 faas 1 function-as-a-service 1 secure-multiparty-computation 1 trustzone 1 go 1 golang 1 virtualization 1 qemu 1 kvm 1 k8s 1 firecracker 1 cri-o 1 cri 1 acrn 1 mev 1 awesome 1 utm 1 macos 1 mac 1 lima 1 docker-desktop 1 colima 1 ethereum 1 hardware-crypto-wallet 1 proof-of-stake 1 skale-network 1 trusted-computing 1 ubuntu 1 wallet 1 alpha 1