avery-blanchard

bootc

Boot and upgrade via container images

container-selinux

SELinux policy files for Container Runtimes

intel-cmt-cat

User space software for Intel(R) Resource Director Technology

spdm-rs

A rust implementation for DMTF SPDM protocol to support Confidential Computing

oci-spec-rs

OCI Runtime, Image and Distribution Spec in Rust

youki

A container runtime written in Rust

vtpm-td

rust-sel4

Rust support for seL4 userspace

gdev

First-Class GPU Resource Management: Device Drivers, Runtimes, and CUDA Compilers for Nouveau.

Fractional-GPUs

Splits single Nvidia GPU into multiple partitions with complete compute and memory isolation (wrt to performace) between the partitions

nvtrust

Ancillary open source software to support confidential computing on NVIDIA GPUs

verus

Verified Rust for low-level systems code

enclave-cc

Process-based Confidential Container Runtime

rust-vmm-container

Container with all dependencies required for running rust-vmm crates integration tests.

AttestationServer

attestation.app remote attestation server. Server code for use with the Auditor app: https://github.com/GrapheneOS/Auditor. It provides two services: submission of attestation data samples and a remote attestation implementation with email alerts to go along with the local implementation based on QR code scanning in the app.

riscv

Low level access to RISC-V processors

svsm

COCONUT-SVSM

ehsm

An End-to-End Distributed and Scalable Cloud KMS (Key Management System) built on top of Intel SGX enclave-based HSM (Hardware Security Module), aka eHSM.

KAISER

Kernel Address Isolation to have Side-channels Efficiently Removed

acai

Protecting Accelerator Execution with Arm Confidential Computing Architecture (USENIX Security 2024)

linux-svsm

Linux SVSM (Secure VM Service Module) for secure x86 virtualization in Rust

gunyah-hypervisor

Gunyah is a Type-1 hypervisor designed for strong security, performance and modularity.

esp-wifi-sys

Wi-Fi and BT drivers packaged for integration into bare-metal esp-wifi.

keystone

Keystone Enclave (QEMU + HiFive Unleashed)

optee_os

Trusted side of the TEE

dashmap

Blazing fast concurrent HashMap for Rust.

reveal.js

The HTML Presentation Framework

jitterbug

Verification of BPF JIT compilers

Lupine-Linux

Linux in Unikernel Clothing

sinkhole

Architectural privilege escalation on x86