attestation

There are 4 repositories under attestation topic.

chiteroman / BootloaderSpoofer
Spoof locked bootloader on local attestations
android attestation avb bootloader certificate certificates hacking hardware
Language:Java 859
GrapheneOS / Auditor
Hardware-based attestation / intrusion detection app for Android devices. It provides both local verification with another Android device via QR codes and optional scheduled server-based verification with support for alert emails. It uses hardware-backed keys and attestation support as the foundation and chains trust to the app for software checks.
security attestation cryptography verifiedboot remote-attestation hsm android grapheneos strongbox monitoring integrity authenticity secure-boot secureboot
Language:Java 565
chainloop-dev / chainloop
Evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more
compliance cyclonedx devsecops sbom sbom-distribution security spdx supply-chain-security metadata-platform sbom-discovery license open-source-licensing ospo oss-compliance regulated-industry attestation in-toto slsa slsa-provenance
Language:Go 487
keylime
keylime / keylime
A CNCF Project to Bootstrap & Maintain Trust on the Edge / Cloud and IoT
attestation cloud edge ima iot opensource security tpm virtualization
Language:Python 460
in-toto / witness
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
attestation security security-tools supply-chain verification
Language:Go 435
bureado / awesome-software-supply-chain-security
A compilation of resources in the software supply chain security domain, with emphasis on open source
reproducible-builds supply-chain-security devsecops vulnerability-scanning security-vulnerability vulnerability-management supply-chain-attacks sbom package-management dependency-management static-analysis software-composition-analysis oss-compliance software-supply-chain software-supply-chain-security dependencies cve-scanning attestation awesome-list
330
intel / confidential-computing-zoo
Confidential Computing Zoo provides confidential computing solutions based on Intel SGX, TDX, HEXL, etc. technologies.
attestation cloud confidential-computing containers enclave key-management sgx tdx
Language:C++ 321
ShaneK2 / inVtero.net
inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
attestation cloud-computing forensics hypervisor integrity-monitoring memory-analysis memory-dump memory-hacking microarchitecture patch-management reverse-engineering secure-hash virtual-machine
Language:C# 285
in-toto / attestation
in-toto Attestation Framework
attestation software-supply-chain-security
Language:Go 266
Consensys / linea-attestation-registry
Verax is a shared registry for storing attestations of public interest on EVM chains, designed to enhance data discoverability and consumption for dApps across the network.
attestation evm sdk smart-contracts solidity thegraph typescript web3
Language:TypeScript 155
signum
a-sit-plus / signum
Kotlin Multiplatform Crypto/PKI/ASN.1 Library with Attestation and Hardware-Backed Crypto Support on Mobile
asn1 attestation cryptography ecdsa kmp kotlin kotlin-multiplatform pki rsa signature crypto asn-1 cose cwt jose jwt ecdh key-agreement aes encryption
Language:Kotlin 141
GrapheneOS / AttestationServer
attestation.app remote attestation server. Server code for use with the Auditor app: https://github.com/GrapheneOS/Auditor. It provides two services: submission of attestation data samples and a remote attestation implementation with email alerts to go along with the local implementation based on QR code scanning in the app.
security attestation cryptography verifiedboot remote-attestation hsm android monitoring grapheneos strongbox integrity authenticity secure-boot secureboot
Language:Java 129
mchmarny / s3cme
Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko generative SBOM, cosign attestation, and SLSA build provenance
attestation cosine oidc provenance sbom slsa supply-chain-security vulnerability
Language:Go 104
coinbase / verifications
📜 "Coinbase Verifications" is a set of Coinbase-verified onchain attestations that enable access to apps and other onchain benefits.
account-verification attestation decentralized-identity did ethereum ethereum-attestation-service onchain op-stack optimism verifiable-credentials
Language:Solidity 103
confidential-containers / trustee
Attestation and Secret Delivery Components
attestation confidential-computing key-management
Language:Rust 90
hex-five / multizone-sdk
MultiZone® Security TEE is the quick and safe way to add security and separation to any RISC-V processors. The RISC-V standard ISA doesn't define TrustZone-like primitives to provide hardware separation. To shield critical functionality from untrusted third-party components, MultiZone provides hardware-enforced, software-defined separation of multi
risc-v security tee multizone trusted-computing trusted-execution-environment secure-element firmware secure-boot root-of-trust container microkernel trustzone freertos fpga hypervisor xilinx sifive attestation digilent-arty-board
Language:C 83
cyclonedx-python-lib
CycloneDX / cyclonedx-python-lib
Python implementation of OWASP CycloneDX
python owasp bom spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx obom mbom saasbom vex software-library attestation cbom library hacktoberfest
Language:Python 79
veehaitch / devicecheck-appattest
Server-side library to validate the authenticity of Apple App Attest artifacts, written in Kotlin.
apple-appattest attestation devicecheck ios java kotlin security webauthn
Language:Kotlin 69
ARM-software / psa-api
Documentation source and development of the PSA Certified API
api attestation cryptography firmware-update iot security
Language:C 64
kubernetes-sigs / tejolote
A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.
attestation provenance sbom sigstore slsa
Language:Go 62
virtee / sev-snp-measure
Calculate AMD SEV/SEV-ES/SEV-SNP measurement for confidential computing
attestation confidential-computing security
Language:Python 61
Catherine22 / SecuritySample
(Android) Hide encrypted secret API keys in C/C++ code, retrieve and decrypt them via JNI. Google SafetyNet APIs example.
jws json-web-signature secret-keys safetynet-api attestation ndk rsa-cryptography certificates android
Language:Java 54
Foxboron / ssh-tpm-ca-authority
SSH Certificate Authority with device attestation
attestation openssh security ssh tpm
Language:Go 54
Azure / blockchain-supply-chain-solution
Umbrella repository for blockchain based supply-chain services and clients
blockchain outlook-addin ethereum azure supply-chain attestation
Language:Shell 52
chainguard-dev / vex
vexctl is a tool to attest VEX impact statements
attestation container csaf sarif sbom scanner vex vulnerability vulnerability-detection
Language:Go 44
GrapheneOS-Archive / AttestationSamples
A small subset of the submitted sample data from https://github.com/GrapheneOS/Auditor. It has a sample attestation certificate chain per device model (ro.product.model) along with a subset of the system properties from the sample as supplementary information.
security attestation cryptography secure-boot verifiedboot remote-attestation hsm android strongbox integrity authenticity secureboot
Language:Shell 35
pkic / remote-key-attestation
Remote Key Attestation
attestation crypto hsm pki private-key secure-enclave smart-card token tpm
33
zntrio / solid
An OIDC authorization server building blocks with security and privacy by design philosophy.
oidc oidc-server oidc-client golang framework jwt cwt privacy oauth pkce paseto attestation
Language:Go 27
nokia / AttestationEngine
An experimental (but fully functional) Remote Attestation Engine and Applications for TPM2.0 based systems (cloud, edge, IoT etc)
iot cloud edge-computing tpm tpm2 txt attestation trust security integrity-checker uefi coreboot rats ietf
Language:Go 24
adrianlshaw / LightVerifier
Simple and scalable Linux tools for verifying TPM-based remote attestations 🔬⚖️🔐⛓📏📜
ima tpm-quote tpm tcg security security-audit attestation hacktoberfest
Language:Shell 22
joemiller / yk-attest-verify
Verify and assert policy on YubiKey attestation certificates
yubikey attestation x509 ssh ssh-key policy verification
Language:Go 20
hex-five / multizone-iot-sdk
MultiZone® Trusted Firmware is the quick and safe way to build secure IoT applications with any RISC-V processor. It provides secure access to commercial and private IoT clouds, real-time monitoring, secure boot, and remote firmware updates. The built-in Trusted Execution Environment provides hardware-enforced separation ...
iot firmware mqtt tls tcp-ip tee trusted-execution-environment trustzone multizone lwip mbedtls freertos risc-v secure-boot embedded-systems ota-firmware-updates xilinx-fpga root-of-trust attestation digilent-arty-board
Language:C 19
hex-five / multizone-linux
MultiZone® Security Enclave for Linux
risc-v security tee mutizone trusted-computing trusted-execution-environment hex-five secure-element linux firmware secure-boot root-of-trust microkernel microservices attestation hypervisor
Language:C 18
zero-savvy / zk-remote-attestation
Implementation of zRA protocol, a non-interactive method for constructing a transparent remote attestation (RA) protocol based on zkSNARKs.
circom merkle-proof remote-attestation tornado-cash zksnarks attestation trustless groth16
Language:Circom 17
rustymagnet3000 / ios_devicecheck_app_attest
Understand iOS 14's DeviceCheck and DCDevice classes.
devicecheck attest attestation ios-security ios-jailbreak
Language:Swift 15
brech1 / eas-rs
Rust utilities for the ethereum attestation service.
attestation ethereum foundry rust service eas
Language:Rust 14

attestation

chiteroman / BootloaderSpoofer

GrapheneOS / Auditor

chainloop-dev / chainloop

keylime / keylime

in-toto / witness

bureado / awesome-software-supply-chain-security

intel / confidential-computing-zoo

ShaneK2 / inVtero.net

in-toto / attestation

Consensys / linea-attestation-registry

a-sit-plus / signum

GrapheneOS / AttestationServer

mchmarny / s3cme

coinbase / verifications

confidential-containers / trustee

hex-five / multizone-sdk

CycloneDX / cyclonedx-python-lib

veehaitch / devicecheck-appattest

ARM-software / psa-api

kubernetes-sigs / tejolote

virtee / sev-snp-measure

Catherine22 / SecuritySample

Foxboron / ssh-tpm-ca-authority

Azure / blockchain-supply-chain-solution

chainguard-dev / vex

GrapheneOS-Archive / AttestationSamples

pkic / remote-key-attestation

zntrio / solid

nokia / AttestationEngine

adrianlshaw / LightVerifier

joemiller / yk-attest-verify

hex-five / multizone-iot-sdk

hex-five / multizone-linux

zero-savvy / zk-remote-attestation

rustymagnet3000 / ios_devicecheck_app_attest

brech1 / eas-rs