trusted-computing

Assured confidential execution (ACE) implements VM-based trusted execution environment (TEE) for embedded RISC-V systems with focus on a formally verified and auditable firmware.

Decentralized governance for Git communities

Trusted Computing based services supporting TPM provisioning and supply chain validation concepts. #nsacyber

MultiZone® Security TEE is the quick and safe way to add security and separation to any RISC-V processors. The RISC-V standard ISA doesn't define TrustZone-like primitives to provide hardware separation. To shield critical functionality from untrusted third-party components, MultiZone provides hardware-enforced, software-defined separation of multi

TPM2 samples with go-tpm and tpm2_tools

The Platform Attribute Certificate Creator can gather component details, create, sign, and validate the TCG-defined Platform Certificate. #nsacyber

Converged Security Suite for Intel & AMD platform security features

This specification will define the RISC-V privilege ISA extensions required to support Supervisor Domain isolation for multi-tenant security use cases e.g. confidential-computing, trusted platform services, fault isolation and so on.

sgxwallet is the first-ever opensource high-performance hardware secure crypto wallet that is based on Intel SGX technology. First opensource product on Intel SGX whitelist. Scales to 100,000+ transactions per second. Currently supports ETH and SKALE, and will support BTC in the future. Sgxwallet is under heavy development and use by SKALE network.

Unified API to Access TCG Compliant measurement, event log, quote in Confidential Computing Environment.

The project has been moved to CC-API organization. For more information:

Zero-trust SDN and trusted computing platform with continuous remote attestation of connected devices and networks at scale. Zero-touch provisioning, fleet management, policy server, Identity and Access Management, KMS and Secrets, bare metal, VM and container orchestration with workload attestation and more.

TPM based mTLS

MultiZone® Security Enclave for Linux

Modern C++23 Module wrapper for TPM 2.0 (tss2-esys). Eliminates raw pointers and manual cleanup using strict RAII resource guards, PCR policy boot sealing, and secure-by-default NVRAM isolation. pretty cool ig

MultiZone free and open API definition

Accountable Autonomy: open-source evidence layer that gates every AI agent tool call against your policy and writes a hash-chained record an auditor verifies offline, without trusting you. Root-agnostic; binds to TPM 2.0 / SEV-SNP when present. Your environment, no SaaS, no telemetry. AGPL-3.0.

MultiZone® Security TEE for Arm® Cortex®-M is the quick and safe way to add security and separation to any Cortex-M based device. MultiZone® software can retrofit existing designs. If you don’t have TrustZone®, or if you require finer granularity than one secure world, you can take advantage of high security separation without the need for hardw…

Secure Computing in the AI age

Exploring Methods of Protecting Confidential Erlang Workloads with Intel SGX