Intel SGX

Intel Software Guard Extensions (SGX) is a Trusted Execution Environment technology that creates enclaves for selected application code and data. Enclave memory is isolated from ordinary applications, the operating system, and the hypervisor.

Enclave identity

An SGX enclave has cryptographic measurements derived from its initial code, data, and security-relevant configuration. It can produce an attestation quote so a remote party can verify those measurements and the platform's security status.

SGX reduces the amount of host software that must be trusted, but developers must still protect enclave interfaces, secrets, dependencies, and side-channel-sensitive code.

Automata supports onchain SGX quote verification through its DCAP contracts and provides an open-source SGX SDK.