Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

Confidential Computing

Confidential Computing is the protection of data in use by performing computation in a hardware-based, attested Trusted Execution Environment. A Trusted Execution Environment (TEE) is an environment that provides a level of assurance of the following three properties: data integrity, data confidentiality, and code integrity. TEEs may have additional attributes such as code confidentiality, programmability, recoverability, and attestability. Confidential Computing aims to reduce the ability for the owner/operator/pwner of a platform to access data and code inside TEEs sufficiently such that this path is not an economically or logically viable attack during execution.

https://github.com/microsoft/openvmm

Home of OpenVMM and OpenHCL.

confidential-computing rust vmm

Last synced: 23 Jan 2025

https://github.com/enarx/enarx

Enarx: Confidential Computing with WebAssembly

confidential-computing webassembly

Last synced: 21 Jan 2025

https://github.com/apache/incubator-teaclave-sgx-sdk

Apache Teaclave (incubating) SGX SDK helps developers to write Intel SGX applications in the Rust programming language, and also known as Rust SGX SDK.

confidential-computing rust sgx tee trusted-execution-environment universal-secure-computing

Last synced: 23 Jan 2025

https://github.com/edgelesssys/constellation

Constellation is the first Confidential Kubernetes. Constellation shields entire Kubernetes clusters from the (cloud) infrastructure using confidential computing.

cloud-security confidential-computing data-encryption kubernetes kubernetes-security

Last synced: 22 Jan 2025

https://github.com/apache/incubator-teaclave

Apache Teaclave (incubating) is an open source universal secure computing platform, making computation on privacy-sensitive data safe and simple.

confidential-computing faas function-as-a-service rust secure-multiparty-computation sgx tee trusted-execution-environment trustzone universal-secure-computing

Last synced: 19 Jan 2025

https://github.com/inclavare-containers/inclavare-containers

A novel container runtime, aka confidential container, for cloud-native confidential computing and enclave runtime ecosystem.

cloud cloud-native cncf confidential-computing confidential-container container containers enclave intel-sgx kubernetes oci oci-runtime runtime sgx sgx-enclave tee trusted-applications

Last synced: 27 Oct 2024

https://github.com/edgelesssys/ego

EGo is an open-source SDK that enables you to develop your own confidential apps in the Go programming language.

confidential-computing confidential-microservices enclave golang intel-sgx sgx

Last synced: 08 Nov 2024

https://github.com/mithril-security/blindai

Confidential AI deployment with secure enclaves :lock:

ai confidential-computing enclave inference intel-sgx machine-learning onnx privacy python3 rust sgx

Last synced: 25 Jan 2025

https://github.com/intel/confidential-computing-zoo

Confidential Computing Zoo provides confidential computing solutions based on Intel SGX, TDX, HEXL, etc. technologies.

attestation cloud confidential-computing containers enclave key-management sgx tdx

Last synced: 27 Oct 2024

https://github.com/edgelesssys/marblerun

MarbleRun is the control plane for confidential computing. Deploy, scale, and verify your confidential microservices on vanilla Kubernetes. 100% Go, 100% cloud native, 100% confidential.

confidential-computing confidential-microservices distributed-systems enclave golang intel-sgx kubernetes microservice service-mesh sgx

Last synced: 22 Jan 2025

https://github.com/apache/incubator-teaclave-trustzone-sdk

Teaclave TrustZone SDK enables safe, functional, and ergonomic development of trustlets.

confidential-computing rust secure-computing tee trusted-execution-environment trustzone

Last synced: 20 Jan 2025

https://github.com/veracruz-project/veracruz

Main repository for the Veracruz privacy-preserving compute project, an adopted project of the Confidential Compute Consortium (CCC).

confidential-computing cryptography distributed-systems enclave nitro-enclaves privacy privacy-enhancing-technologies rust sel4 sgx tls trustzone wasm webassembly

Last synced: 27 Oct 2024

https://github.com/edgelesssys/edgelessdb

EdgelessDB is a MySQL-compatible database for confidential computing. It runs entirely inside a secure enclave and comes with advanced features for collaboration, recovery, and access control.

confidential-computing database enclave mariadb mysql sgx sql

Last synced: 08 Nov 2024

https://github.com/microsoft/regorus

Regorus - A fast, lightweight Rego (OPA policy language) interpreter written in Rust.

c confidential-computing cpp csharp golang interpreter java javascript no-std opa policy-as-code python rego rust wasm

Last synced: 25 Jan 2025

https://github.com/edgelesssys/edgelessrt

Edgeless RT is an SDK and a runtime for Intel SGX. It combines top-notch Go support with simplicity, robustness and a small TCB. Developing confidential microservices has never been easier! C++17 and Rust (experimental) are also supported.

confidential-computing confidential-microservices enclave golang intel-sgx rust sgx trusted-execution-environment

Last synced: 09 Nov 2024

https://github.com/islet-project/islet

An on-device confidential computing platform

confidential-computing rust

Last synced: 09 Nov 2024

https://github.com/capeprivacy/tf-trusted

tf-trusted allows you to run TensorFlow models in secure enclaves

confidential-computing machine-learning secure-enclaves security sgx

Last synced: 09 Nov 2024

https://github.com/sjtu-ipads/hedb

Towards A Secure Yet Maintainable Encrypted Database

confidential-computing database-management encrypted-database maintanance postgres

Last synced: 20 Dec 2024

https://github.com/virtee/sev-snp-measure

Calculate AMD SEV/SEV-ES/SEV-SNP measurement for confidential computing

attestation confidential-computing security

Last synced: 02 Jan 2025

https://github.com/SJTU-IPADS/HEDB

Towards A Secure Yet Maintainable Encrypted Database

confidential-computing database-management encrypted-database maintanance postgres

Last synced: 09 Nov 2024

https://github.com/apache/incubator-teaclave-java-tee-sdk

Apache Teaclave (incubating) Java TEE SDK is an open source universal confidential computing framework, making java computation on privacy-sensitive data safe and simple.

confidential-computing graalvm java sgx tee trusted-execution-environment

Last synced: 07 Oct 2024

https://github.com/R3Conclave/conclave-core-sdk

SDK for creating confidential SGX enclaves in Java, Kotlin and Python

confidential-computing java javascript kotlin python sgx sgx-enclave

Last synced: 09 Nov 2024

https://github.com/ibm/ace-riscv

Assured confidential execution (ACE) implements VM-based trusted execution environment (TEE) for RISC-V with focus on a formally verified and auditable security monitor.

confidential-computing coq formal-verification refinedrust riscv rust-lang security trusted-computing trusted-execution-environment virtualization

Last synced: 12 Nov 2024

https://github.com/cosmian/ciphercompute

The free EAP version of the Cosmian Collaborative Confidential Computing platform. Try it!

confidential-computing cryptography distributed-computing multiparty-computation

Last synced: 28 Nov 2024

https://github.com/riscv/riscv-smmtt

This specification will define the RISC-V privilege ISA extensions required to support Supervisor Domain isolation for multi-tenant security use cases e.g. confidential-computing, trusted platform services, fault isolation and so on.

access-control ap-tee confidential-computing smmtt supervisor-domains trusted-computing trusted-execution-environment

Last synced: 29 Nov 2024

https://github.com/intel/confidential-cloud-native-primitives

Build Trusted Chain for Cloud Native in Confidential Computing Envrionment

cloud-native confidential-computing measurement tcb tdx tpm trusted-computing

Last synced: 09 Nov 2024

https://sectrs-acai.github.io/acai

Protecting Accelerator Execution with Arm Confidential Computing Architecture (USENIX Security 2024)

armcca armv9 confidential-computing

Last synced: 09 Nov 2024

https://github.com/qascade/dcr

A PoC framework to orchestrate interoperable Differentially Private Data Clean Room Services using Intel SGX hardware as root of trust.

confidential-computing data data-security datacleanroom differential-privacy golang gssoc gssoc23 intel-sgx intel-sgx-sdk

Last synced: 09 Nov 2024

https://github.com/salrashid123/confidential_space

Constructing Trusted Execution Environment (TEE) with GCP Confidential Space

confidential-computing google-cloud-platform trusted-execution-environment

Last synced: 22 Nov 2024

https://github.com/kinvolk/azure-cvm-tooling

Libraries and tools for Confidential Computing on Azure

attestation azure confidential-computing tpm2

Last synced: 18 Nov 2024

https://github.com/kriskwiatkowski/TEE-TLS-delegator

Solution to harden TLS security by storing private keys and delegating operations to the Trused Execution Environment

confidential-computing tee trusted-execution-environment trustzone

Last synced: 10 Nov 2024

https://github.com/salrashid123/tpm_daemonset

Kubernetes Trusted Platform Module (TPM) DaemonSet

confidential-computing grpc kubernetes trusted-platform-module

Last synced: 22 Nov 2024

https://github.com/Maxul/zerocache

A cloud-oriented middlebox for network confidential computing

confidential-computing enclave middlebox

Last synced: 09 Nov 2024

https://github.com/cosmian/mpc_millionaires

CipherCompute: A more elaborated version of Yao's millionaire problem. Secret compute of KPIs

confidential-computing cryptography distributed-computing multiparty-computation

Last synced: 28 Nov 2024

https://github.com/foxboron/go-tpm-keyfiles

TPM 2.0 TSS keyfile library

confidential-computing go-tpm tpm tpm2 tss

Last synced: 08 Nov 2024

https://github.com/cosmian/mpc_join

CipherCompute: Blind Join for Confidential Data Science and Federated Learning using MPC

confidential-computing cryptography distributed-computing multiparty-computation

Last synced: 28 Nov 2024

https://github.com/giancarlolelli/enclave.net

This repository contains the code and roadmap for the Enclave.NET library, a managed wrapper around the Open Enclave SDK. This library allows app developers to build Intel SGX-aware applications using managed .NET code.

attestation cloud-native confidential-computing enclave intel-sgx open-enclave remote-attestation sovereign-cloud

Last synced: 05 Dec 2024

https://github.com/mkulke/mkosi-playground

Building azure images with mkosi

azure confidential-computing mkosi secureboot

Last synced: 14 Jan 2025

https://github.com/bbjubjub2494/ethz-syssec-sgx-assignment

Solution for 3rd graded assignment in 252-1414-00L System Security

confidential-computing sgx

Last synced: 13 Jan 2025

https://github.com/thibauult/tee-mock-server

A mock server in Go that generates signed JWT tokens for simulating Google Cloud Confidential Space authentication

attestation-service confidential-computing google-cloud google-cloud-platform mock-server tee trusted-execution-environment

Last synced: 07 Dec 2024

https://github.com/salrashid123/gke_sandbox

GKE Sandbox for Confidential ML Inference

confidential-computing gke-cluster google-cloud machine-learning

Last synced: 22 Jan 2025

https://github.com/tufteddeer/openssh-tdx-remote-attestation

OpenSSH with support for Intel TDX remote attestation

confidential-computing intel-tdx ssh

Last synced: 27 Dec 2024

https://github.com/salrashid123/cs_mesh

Service->Service mTLS using Envoy and Consul Service Discovery on GCP Confidential Space

confidential-computing google-cloud-platform hashicorp-consul tls trusted-execution-environment

Last synced: 22 Jan 2025

https://github.com/hollowman6/terraform

Terraform code to spin a AMD SEV-SNP Confidential Kubernetes cluster using AWS EC2 instances

confidential-computing kubernetes terraform

Last synced: 25 Jan 2025

https://github.com/rjzak/cert-buddy

Parse the CSR from Enarx that goes to Steward https://github.com/enarx/enarx/

confidential-computing enarx

Last synced: 04 Dec 2024