-
Notifications
You must be signed in to change notification settings - Fork 217
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Signed-off-by: Bruno Vavala <bruno.vavala@intel.com>
- Loading branch information
Showing
1 changed file
with
33 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,33 @@ | ||
--- | ||
layout: default | ||
title: one-attestation-api | ||
parent: Labs | ||
--- | ||
# Lab Name | ||
One Attestation API | ||
|
||
# Short Description | ||
This lab proposes to create a single API to handle remote attestations. | ||
Attestations are a crucial mechanism to establish trust in hardware-based trusted execution environments (TEEs). | ||
Today, multiple attestation mechanisms are available, like SGX-EPID (which is being phased out), SGX-DCAP, TDX-DCAP and SEV-attestation. | ||
This proposal aims to create a single abstraction for the generation and verification of hardware-based attestations. | ||
The abstraction can benefit, and avoid redundant implementations in, multiple projects (e.g., Fabric Private Chaincode, Private Data Objects) that use TEEs to enhance software integrity and confidentiality. | ||
|
||
# Scope of Lab | ||
The scope of the lab is to provide tools and support for hardware/software attestations. | ||
Contributions from the community will help support additional attestation mechanisms and TEEs. | ||
Initially, we anticipate to integrate this tool in two Hyperledger projects: Fabric Private Chaincode and Private Data Objects. | ||
|
||
# Initial Committers | ||
- https://github.com/bvavala | ||
|
||
# Sponsor | ||
- https://github.com/mbrandenburger - Marcus Brandenburger (bur@zurich.ibm.com) - LFDT TAC Member | ||
|
||
# Pre-existing repository | ||
Initially, this lab is meant to spin off the attestation API created in/for the Fabric Private Chaincode project. | ||
- [https://github.com/hyperledger/fabric-private-chaincode](https://github.com/hyperledger/fabric-private-chaincode/tree/2b384e75ed1b19e8192f4c070ba9925e4a5a1ea7/common/crypto/attestation-api) | ||
|
||
Recently, the library was extended with DCAP support and partially integrated with the Hyperledger Labs Private Data Objects project. | ||
- [One Attestation API](https://github.com/bvavala/private-data-objects/tree/bruno.241017.move-to-attestation-api/common/crypto/attestation-api) | ||
- [Integration in PDO](https://github.com/hyperledger-labs/private-data-objects/pull/501) |