oasisprotocol / oasis-core

Performant and Confidentiality-Preserving Smart Contracts + Blockchains
https://oasisprotocol.org
Apache License 2.0
334 stars 110 forks source link

Explore support for Intel TDX #5735

Open kostko opened 3 months ago

kostko commented 3 months ago

TDX Quote Verification The remote attestation quotes for TDX extend the existing quotes used for SGX/DCAP. There are additional fields and structures for the quotes and TCB infos, but it should be possible to extend the existing quote verification logic.

TDX Quote Generation Generating remote attestation quotes should be explored. Initially, this would be for bare metal TDX machines where the node is provisioning TD guests (similar to current runtimes). We can later explore modes where provisioning is handled by cloud-specific APIs.