Skip to content

Latest commit

 

History

History
7 lines (4 loc) · 776 Bytes

EnclaveVerifier.md

File metadata and controls

7 lines (4 loc) · 776 Bytes

EnclaveVerifier

EnclaveVerifier is a smart contract for verifying Intel SGX remote attestation reports signed by Intel's Attestation Service, adhering to the EPID specs. SGX devices can use these contracts to prove on-chain that they are running the expected enclave and have committed to data.

At a high level EnclaveVerifier verifies that the leaf x509 certificate used to sign the attestation report originates from Intel. The report is parsed, its enclave measurements are verified, and finally the 64 byte enclave committed data (a public key) is extracted.

Currently, this contract is only used to onboard Guardian's enclaves into the GuardianModule contract.