[SPEC] Add TEE/SGX support for the signing/keygen functionality

[drewstone]

Overview

• We want the keygen to run inside an enclave. The key should be stored in the enclave.
• We want the signing to run inside an enclave. All sensitive operations happen inside the enclave.
• We can send the public key generated outside of the enclave for signing set operations.
• Using AWS / Fortanix libraries.

Research

• All MPC companies use enclaves for key management / operations (Fireblocks, Lit Protocol, etc.)

Examples

Questions/Issues

[drewstone]

https://aws.amazon.com/blogs/security/confidential-computing-an-aws-perspective/

[drewstone]

@thomivy we should consider structuring this as a grant.