Enarx for Confidential Computing
summary
Enarx implements an end-to-end confidential computing stack that runs WebAssembly binaries compiled from many languages, using WebAssembly (wasmtime) as the runtime and Rust for most code. The demo compiles a Rust app to wasm, deploys it to an AMD SEV keep on a host called rome, and proves a secret is readable in nil and KVM runs but remains encrypted and unrevealed under SEV. SEV support is working; SGX is in progress; VM-based encryption shows ~2–4% overhead. Code and design are open on GitHub as a POC.
AI-written summary · about
chapters (16)
- 0:00Intro
- 0:33About Enarx
- 2:28Isolation
- 5:55SGX
- 8:51NRX
- 14:41Runtime Architecture
- 16:38Architecture
- 18:03Demo
- 22:59Endtoend implementation
- 24:24Project update
- 25:28Project overview
- 26:09Project components
- 27:33Performance penalty
- 28:44Framework
- 31:11Trust
- 36:04Keep Repository
related talks
40mConfidential Computing Across Multiple Clouds and Platforms: Project Enarx
46mEnarx - Attested, Secured Execution with AMD’s SEV
53mEnarx - secured, attested execution on any cloud
40mConfidential Computing and Privacy-Enhancing Technologies - The Landscape
35mVeracruz: Privacy-preserving mutliparty computation using trusted hardware
30mProtecting Wasm Workloads with Confidential Computing and TEE...
36mBringing honest computing to the WASM world
16mIntroduction to confidential computing