Occlum is a memory-safe, multi-process library OS for Intel SGX

Meaningful control of data in distributed systems.

A novel container runtime, aka confidential container, for cloud-native confidential computing and enclave runtime ecosystem.

EGo is an open-source SDK that enables you to develop your own confidential apps in the Go programming language.

Confidential AI deployment with secure enclaves 🔒

A practical attack framework for precise enclave execution control

A curated list of open-source projects that help exploit Intel SGX technology

Enclave ready EVM (eEVM) is an open-source, standalone, embeddable, C++ implementation of the Ethereum Virtual Machine.

Confidential Computing Zoo provides confidential computing solutions based on Intel SGX, TDX, HEXL, etc. technologies.

SGX-LKL Library OS for running Linux applications inside of Intel SGX enclaves

MarbleRun is the control plane for confidential computing. Deploy, scale, and verify your confidential microservices on vanilla Kubernetes. 100% Go, 100% cloud native, 100% confidential.

Spectre attack against SGX enclave

A fully in-browser privacy solution to make Conversational AI privacy-friendly

Main repository for the Veracruz privacy-preserving compute project, an adopted project of the Confidential Compute Consortium (CCC).

An encrypted data analytics platform

EdgelessDB is a MySQL-compatible database for confidential computing. It runs entirely inside a secure enclave and comes with advanced features for collaboration, recovery, and access control.

Penglai Enclave is an open-sourced, secure and scalable TEE system for RISC-V.

Edgeless RT is an SDK and a runtime for Intel SGX. It combines top-notch Go support with simplicity, robustness and a small TCB. Developing confidential microservices has never been easier! C++17 and Rust (experimental) are also supported.

Tooling for Nitro Enclave Management

This repo provides a C API for AWS Nitro Enclaves, including a KMS SDK that integrates it with attestation.