Decentralized governance for Git communities

Trusted Computing based services supporting TPM provisioning and supply chain validation concepts. #nsacyber

Assured confidential execution (ACE) implements VM-based trusted execution environment (TEE) for embedded RISC-V systems with focus on a formally verified and auditable firmware.

MultiZone® Security TEE is the quick and safe way to add security and separation to any RISC-V processors. The RISC-V standard ISA doesn't define TrustZone-like primitives to provide hardware separation. To shield critical functionality from untrusted third-party components, MultiZone provides hardware-enforced, software-defined separation of multi

TPM2 samples with go-tpm and tpm2_tools

Converged Security Suite for Intel & AMD platform security features

The Platform Attribute Certificate Creator can gather component details, create, sign, and validate the TCG-defined Platform Credential. #nsacyber

Lunal is the AI confidential compute platform. We run your AI workloads (inference, training, agents) inside hardware-encrypted environments called Trusted Execution Environments (TEEs). Your data and code stay private while being processed. Your code can't be tampered with. You can cryptographically verify both claims without trusting us.

sgxwallet is the first-ever opensource high-performance hardware secure crypto wallet that is based on Intel SGX technology. First opensource product on Intel SGX whitelist. Scales to 100,000+ transactions per second. Currently supports ETH and SKALE, and will support BTC in the future. Sgxwallet is under heavy development and use by SKALE network.

This specification will define the RISC-V privilege ISA extensions required to support Supervisor Domain isolation for multi-tenant security use cases e.g. confidential-computing, trusted platform services, fault isolation and so on.

Unified API to Access TCG Compliant measurement, event log, quote in Confidential Computing Environment.

The project has been moved to CC-API organization. For more information:

Platform software for Trusted Computing - TPM 2.0, Certificate Authority, and Web Services required to perform Local and Remote Attestation, provision, deploy, manage, and secure connected devices and networks at scale.

MultiZone® Security Enclave for Linux

TPM based mTLS

MultiZone free and open API definition

MultiZone® Security TEE for Arm® Cortex®-M is the quick and safe way to add security and separation to any Cortex-M based device. MultiZone® software can retrofit existing designs. If you don’t have TrustZone®, or if you require finer granularity than one secure world, you can take advantage of high security separation without the need for hardware and software redesign, eliminating the complexity associated with managing a hybrid hardware/software security scheme.

plan-bound authorization architecture for governing privileged effects in untrusted computational agents.

Exploring Methods of Protecting Confidential Erlang Workloads with Intel SGX

Sign, Verify and decode using Google Cloud vTPM Endorsement and Attestation Key and Certificate

Secure Computing in the AI age

Sealing RSA and Symmetric keys to TPM PCR values on Google Cloud

An easy to use cross-platform app for setting up self-encrypting drives.

可信计算(Trusted Compute)技术调研

MultiZone® Security SDK for Ada

AWS Credentials for Hardware Security Modules and TPM based AWS_SECRET_ACCESS_KEY

A Project for National Information Security Competition for College Students

MultiZone® Security TEE for Andes N22/AE250 is the quick and safe way to add security and separation to any RISC-V processors. The RISC-V standard ISA doesn't define TrustZone-like primitives to provide hardware separation. To shield critical functionality from untrusted third-party components, MultiZone provides hardware-enforced, software-defined separation of multiple equally secure worlds. Unlike antiquated hypervisor-like solutions, MultiZone is self-contained, presents an extremely small attack surface, and it is policy driven, meaning that no coding is required – and in fact even allowed. MultiZone works with any 32-bit or 64-bit RISC-V processors with standard Physical Memory Protection unit (PMP) and “U” mode.

Generate and verify JWT tokens with PKCS-11

KMS, TPM and HSM based Azure Certificate Credentials