Enarx - secured, attested execution on any cloud
summary
Enarx delivers a deployment framework that runs WebAssembly modules inside CPU-protected keeps (supports Intel SGX and AMD SEV) with remote attestation, encrypted payload delivery, and execution returning only ciphertext-protected results; demo shows an attestation handshake, encrypted code/data upload, and a computed answer with perfect forward secrecy (different ciphertexts on repeated runs). Design goals are a minimal TCB, CPU whitelist/blacklist for vendor portability, Rust memory safety, open-source governance, and cloud-agnostic portability across hosts and orchestrators.
AI-written summary · about
chapters (6)
- 0:00Start
- 9:20Architecture
- 10:48Deployment Framework
- 12:06Attestation Process
- 16:31Design Principles
- 26:41Whitelist Blacklist
related talks
46mEnarx - Attested, Secured Execution with AMD’s SEV
40mConfidential Computing Across Multiple Clouds and Platforms: Project Enarx
38mEnarx for Confidential Computing
35mVeracruz: Privacy-preserving mutliparty computation using trusted hardware
40mConfidential Computing and Privacy-Enhancing Technologies - The Landscape
36mBringing honest computing to the WASM world
20mHyperEnclave: An Open and Cross-platform Trusted Execution Environment
38mOne Ring -3 To Secure Them All: Computing with Hardware Enclaves