Skip to content

Commit

Permalink
One Attestation API lab proposal
Browse files Browse the repository at this point in the history
Signed-off-by: Bruno Vavala <bruno.vavala@intel.com>
  • Loading branch information
bvavala authored and tkuhrt committed Dec 3, 2024
1 parent ea69da9 commit 7436df5
Showing 1 changed file with 33 additions and 0 deletions.
33 changes: 33 additions & 0 deletions labs/lfdt/one-attestation-api.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,33 @@
---
layout: default
title: one-attestation-api
parent: Labs
---
# Lab Name
One Attestation API

# Short Description
This lab proposes to create a single API to handle remote attestations.
Attestations are a crucial mechanism to establish trust in hardware-based trusted execution environments (TEEs).
Today, multiple attestation mechanisms are available, like SGX-EPID (which is being phased out), SGX-DCAP, TDX-DCAP and SEV-attestation.
This proposal aims to create a single abstraction for the generation and verification of hardware-based attestations.
The abstraction can benefit, and avoid redundant implementations in, multiple projects (e.g., Fabric Private Chaincode, Private Data Objects) that use TEEs to enhance software integrity and confidentiality.

# Scope of Lab
The scope of the lab is to provide tools and support for hardware/software attestations.
Contributions from the community will help support additional attestation mechanisms and TEEs.
Initially, we anticipate to integrate this tool in two Hyperledger projects: Fabric Private Chaincode and Private Data Objects.

# Initial Committers
- https://github.com/bvavala

# Sponsor
- https://github.com/mbrandenburger - Marcus Brandenburger (bur@zurich.ibm.com) - LFDT TAC Member

# Pre-existing repository
Initially, this lab is meant to spin off the attestation API created in/for the Fabric Private Chaincode project.
- [https://github.com/hyperledger/fabric-private-chaincode](https://github.com/hyperledger/fabric-private-chaincode/tree/2b384e75ed1b19e8192f4c070ba9925e4a5a1ea7/common/crypto/attestation-api)

Recently, the library was extended with DCAP support and partially integrated with the Hyperledger Labs Private Data Objects project.
- [One Attestation API](https://github.com/bvavala/private-data-objects/tree/bruno.241017.move-to-attestation-api/common/crypto/attestation-api)
- [Integration in PDO](https://github.com/hyperledger-labs/private-data-objects/pull/501)

0 comments on commit 7436df5

Please sign in to comment.