sev-snp

Attestation verification services based on Veraison components

The Automata AMD SEV-SNP Attestation SDK is a software development kit designed to help users generate the AMD SEV-SNP Attestation Report using Rust across different cloud service providers, and generate Risc0 and SP1 ZK Proofs which can be verified on-chain. Powered by Automata

Easy guides to set up and test TEEs: SGX, TrustZone, CCA, TDX, AMD SEV-SNP, PMP

Remote inspection support for confidential AMD SEV-SNP VMs.

A TEE deployment auditor for the trust boundaries attestation forgets — audits Nitro Enclave bootstrap state, KMS attestation, IAM, and host posture (33 checks).

SnpGuard is an SEV-SNP (Secure Encrypted Virtualization - Secure Nested Paging) attestation service and toolset written in Rust. It provides a secure solution for preparing confidentiality-ready and attestation-ready guest virtual machines running on AMD EPYC processors with SEV-SNP support

Developer blind to the probes, auditor blind to the weights: a sealed-room protocol to audit AI models you can't steal. TEE + attestation + weight commitment + transparency log + extraction detector + DP noise + dual-signed transcript.

Bunch of explanations and tutorials around confidential computing

Mock implementation of the SEV-SNP processor firmware interface

Early Attestation Considered Very Harmful (CVE-2026-92701, CVE-2026-92702, CVE-2026-33697, and more to come)

A minimal, hardened Rust runtime for executing critical federated learning aggregation logic (e.g., Multi-Krum, Federated Averaging) entirely within hardware-enforced Trusted Execution Environments (TEEs) including AMD SEV-SNP, Intel SGX/TDX, and AWS Nitro Enclaves.

CLI tool to calculate SEV-SNP measurements from OVMF firmware files for Google Cloud Confidential VMs. Built around gce-tcb-verifier library.

Post-Quantum Zero-Trust Security Mesh — ML-KEM-768 (FIPS 203), TEE enclaves, Cedar policy engine, eBPF moving-target defense

Python libraries for parsing SNP reports, fetching VCEK cert chains, and verifying them

Verify SEV-SNP attestations inside ICP canisters

Prototype for AMD SEV-SNP guest VM attestation

Demos for Azure Confidential Computing: Confidential Temp Disk Encryption blog post

Hardware-attested relay for AgentVault — AMD SEV-SNP confidential VM execution

Confidential AI agent runtime — hardware-attested, governed sandboxes (AMD SEV-SNP). Apache-2.0. Rust top-to-bottom.

Reference implementation, ProVerif model and hardware measurements for draft-novak-lamps-tacra-est (the EST profile of TACRA)