Occlum is a memory-safe, multi-process library OS for Intel SGX

Meaningful control of data in distributed systems.

A novel container runtime, aka confidential container, for cloud-native confidential computing and enclave runtime ecosystem.

EGo is an open-source SDK that enables you to develop your own confidential apps in the Go programming language.

Confidential AI deployment with secure enclaves :lock:

A practical attack framework for precise enclave execution control

A curated list of open-source projects that help exploit Intel SGX technology

Enclave ready EVM (eEVM) is an open-source, standalone, embeddable, C++ implementation of the Ethereum Virtual Machine.

Confidential Computing Zoo provides confidential computing solutions based on Intel SGX, TDX, HEXL, etc. technologies.

MarbleRun is the control plane for confidential computing. Deploy, scale, and verify your confidential microservices on vanilla Kubernetes. 100% Go, 100% cloud native, 100% confidential.

SGX-LKL Library OS for running Linux applications inside of Intel SGX enclaves

Spectre attack against SGX enclave

A fully in-browser privacy solution to make Conversational AI privacy-friendly

Main repository for the Veracruz privacy-preserving compute project, an adopted project of the Confidential Compute Consortium (CCC).

An encrypted data analytics platform

EdgelessDB is a MySQL-compatible database for confidential computing. It runs entirely inside a secure enclave and comes with advanced features for collaboration, recovery, and access control.

Penglai Enclave is an open-sourced, secure and scalable TEE system for RISC-V.

Tooling for Nitro Enclave Management

Edgeless RT is an SDK and a runtime for Intel SGX. It combines top-notch Go support with simplicity, robustness and a small TCB. Developing confidential microservices has never been easier! C++17 and Rust (experimental) are also supported.

This repo provides a C API for AWS Nitro Enclaves, including a KMS SDK that integrates it with attestation.

Efficient TLS termination inside Intel SGX enclaves for existing applications

Secure collaborative training and inference for XGBoost.

mbedtls-SGX: a SGX-friendly TLS stack (ported from mbedtls)

Nemesis: Studying microarchitectural timing leaks in rudimentary CPU interrupt logic

AWS Certificate Manager for Nitro Enclaves allows the use of public and private SSL/TLS certificates with web applications and web servers running on Amazon EC2 instances with AWS Nitro Enclaves.

This is the main repo for Penglai.

Oasis Sapphire - the confidential EVM-compatible ParaTime for the Oasis Network

SQLite database inside a secure Intel SGX enclave (Linux)

Tutorial: Uncovering and mitigating side-channel leakage in Intel SGX enclaves

Tool kit for building secure, scalable, and networked services on top of AWS Nitro Enclaves.