Occlum is a memory-safe, multi-process library OS for Intel SGX

A novel container runtime, aka confidential container, for cloud-native confidential computing and enclave runtime ecosystem.

EGo is an open-source SDK that enables you to develop your own confidential apps in the Go programming language.

A list of system papers using/about Intel SGX

Confidential AI deployment with secure enclaves 🔒

A curated list of open-source projects that help exploit Intel SGX technology

MarbleRun is the control plane for confidential computing. Deploy, scale, and verify your confidential microservices on vanilla Kubernetes. 100% Go, 100% cloud native, 100% confidential.

FPC enables Confidential Chaincode Execution for Hyperledger Fabric using Intel SGX.

Edgeless RT is an SDK and a runtime for Intel SGX. It combines top-notch Go support with simplicity, robustness and a small TCB. Developing confidential microservices has never been easier! C 17 and Rust (experimental) are also supported.

Efficient TLS termination inside Intel SGX enclaves for existing applications

mbedtls-SGX: a SGX-friendly TLS stack (ported from mbedtls)

Kubernetes Device Plugin for Intel SGX

Implementation of MinBFT consensus protocol.

A proxy for light client verification executed in TEE.

Intel SGX with GoLang

Derived from CAT-SGX and elf-respect: Practical and Efficient in-Enclave Verification of Privacy Compliance

An ethereum key pair generator & transaction signer/sender using Intel SGX & Rust.

SGX-aware container orchestrator

Website for our final year project - FRING: FAST BLOCKCHAIN ON SGX-FACILITATED PEER-TO-PEER NETWORK; Project FRing includes a new peer-to-peer network protocol that improves communication performance among peers and an implementation of fast, consistent blockchain system on top of this P2P network.

Confidential compute for sensitive data sharing and commercial collaboration