Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/automata-network/tdx-attestation-sdk
The Automata TDX Attestation SDK is a software development kit designed to help users generate the Intel TDX Quote using Rust across different cloud service providers, and generate Risc0 and SP1 ZK Proofs which can be verified on-chain. Powered by Automata
https://github.com/automata-network/tdx-attestation-sdk
intel-tdx rust tdx tdx-sdk
Last synced: about 2 months ago
JSON representation
The Automata TDX Attestation SDK is a software development kit designed to help users generate the Intel TDX Quote using Rust across different cloud service providers, and generate Risc0 and SP1 ZK Proofs which can be verified on-chain. Powered by Automata
- Host: GitHub
- URL: https://github.com/automata-network/tdx-attestation-sdk
- Owner: automata-network
- License: apache-2.0
- Created: 2024-11-05T09:42:44.000Z (3 months ago)
- Default Branch: main
- Last Pushed: 2024-11-19T07:14:36.000Z (2 months ago)
- Last Synced: 2024-11-19T07:40:09.145Z (2 months ago)
- Topics: intel-tdx, rust, tdx, tdx-sdk
- Language: Rust
- Homepage: https://ata.network
- Size: 829 KB
- Stars: 5
- Watchers: 4
- Forks: 1
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Automata TDX Attestation SDK
[](LICENSE)
## Overview
Automata TDX Attestation SDK is the most-feature complete SDK for Intel TDX development, it consists of three parts:
* TDX package: it helps developers to generate the Intel TDX Quote in different cloud service providers (CSP).
* Risc0 and Succinct CLIs to interact with the corresponding zkVM servers to generate the proofs, and constructs the [Automata DCAP Attestation](https://github.com/automata-network/automata-dcap-attestation) contracts calls to perform the on-chain verification.
* Risc0 and Succinct ZK host and guest programs.
### Environment Preparation
Refer to [TDX package](tdx/README.md) to setup the Intel TDX CVM in different cloud service providers (CSP).
## Intel TDX Quote Generation
Use [TDX package](tdx/README.md) to generate the Intel TDX Quote, you can find an example in [tdx_attestation](tdx/examples/attestation.rs).
## Intel TDX Quote Verification
### Verify Attestation on-chain
In [Automata DCAP Attestation](https://github.com/automata-network/automata-dcap-attestation), We provide two ways to verify the Intel TDX quote on-chain:
```solidity
function verifyAndAttestOnChain(bytes calldata rawQuote)
```
It accepts the raw quote hex string to perform the on-chain verification, all collaterals will be fetched from the [Automata on-chain PCCS](https://github.com/automata-network/automata-on-chain-pccs).
```solidity
function verifyAndAttestWithZKProof(bytes calldata output, bytes calldata proofBytes)
```
The first parameter represents the output of the zkVM, while the second one is consist of the ZK type and its corresponding proof. It supports two kinds of ZK technologies to perform the on-chain verification:
* [Risc0](https://github.com/risc0/risc0)
- output: the journal of the Risc0 zkVM output
- proofBytes: 0x01 + the seal of the Risc0 zkVM output
* [SP1](https://github.com/succinctlabs/sp1)
- output: the execution result of the SP1 Prover output
- proofBytes: 0x02 + the proof of the SP1 Prover output
The on-chain verification contract has been deployed to Automata Testnet at [0x322C8c8E80369ae9e8B2BbdEEDc798e3F16A2094](https://explorer-testnet.ata.network/address/0x322C8c8E80369ae9e8B2BbdEEDc798e3F16A2094).
### Verify Attestation off-chain
Please follow Intel official DCAP repo [SGXDataCenterAttestationPrimitives](https://github.com/intel/SGXDataCenterAttestationPrimitives) to perform the off-chain verification.
## ZK Optimization
### Risc0
To get started, you need to have the following installed:
* [Rust](https://doc.rust-lang.org/cargo/getting-started/installation.html)
* [Foundry](https://getfoundry.sh/)
* [RISC Zero](https://dev.risczero.com/api/zkvm/install)
#### Configuring Bonsai
***Note:*** *To request an API key [complete the form here](https://bonsai.xyz/apply).*
With the Bonsai proving service, you can produce a [Groth16 SNARK proof] that is verifiable on-chain.
You can get started by setting the following environment variables with your API key and associated URL.
```bash
export BONSAI_API_KEY="YOUR_API_KEY" # see form linked above
export BONSAI_API_URL="BONSAI_URL" # provided with your api key
```
### Succinct
To get started, you need to have the following installed:
* [Rust](https://doc.rust-lang.org/cargo/getting-started/installation.html)
* [SP1](https://docs.succinct.xyz/getting-started/install.html)
* [Docker](https://docs.docker.com/get-started/get-docker/)
***Note:*** *To request an whitelisted address, [complete the form here](https://docs.google.com/forms/d/e/1FAIpQLSd-X9uH7G0bvXH_kjptnQtNil8L4dumrVPpFE4t8Ci1XT1GaQ/viewform).*
With the SP1 Proving Network, you can produce a [Groth16 SNARK proof] or [Plonk SNARK proof] that is verifiable on-chain.
You can get started by setting the following environment variables with your whitelisted address and associated Proving Network.
```bash
export SP1_PROVER=network
export SP1_PRIVATE_KEY=""
```
## Acknowledgements
We would like to acknowledge the projects below whose previous work has been instrumental in making this project a reality.
* [Risc0](https://github.com/risc0/risc0): The Risc0 ZK Optimization to reduce the gas cost to verify the Intel TDX Quote on-chain.
* [SP1](https://github.com/succinctlabs/sp1): The Succinct ZK Optimization to reduce the gas cost to verify the Intel TDX Quote on-chain. It supports Groth16 and Plonk proofs.
* [Automata DCAP Attestation](https://github.com/automata-network/automata-dcap-attestation): The open-source DCAP attestation smart contracts to verify Intel TDX Quote.
## Disclaimer
This project is under development. All source code and features are not production ready.