flashbots/attested-tls

primitives for attested tls channels

Stars: 5
Forks: 3
Open beginner issues: 0
Indexed issues: 17
Avg merge: 4d 1h
Merged PRs (30d): 8

Dominant language: Rust
License: MIT
Last GitHub push: Sep 9, 2026
Latest indexed: Sep 16, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed

Open All

17 issues indexed so far

Add XFAM validation using bitmask when verifying DCAP quotes Open

enhancement

flashbots/attested-tls#43 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
feat: use builder pattern in `attestation` crate to tune attestation logic Open

flashbots/attested-tls#19 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
AttestedCertificateResolver should backoff when re-trying to create a new attested certificate Open

flashbots/attested-tls#21 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
PCCS crate will panic if used without a tokio runtime Open

flashbots/attested-tls#23 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
PCCS crate - consider adding a timeout to Pccs::ready method Open

flashbots/attested-tls#24 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
feat: decouple platform and measurements, allow flexible policies Open

flashbots/attested-tls#28 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 16, 2026
Moving attestation generation and verification code to `attest` repo. Open

flashbots/attested-tls#40 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
PCCS crate - consider using moka cache library with Time To Live (TLL) configured Open

flashbots/attested-tls#44 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Requiring collateral to be in cache on verification causes problems Open

flashbots/attested-tls#58 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Investigate adding CoRIM support for future TDX attestation Open

flashbots/attested-tls#64 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
azure: TCTI is hardcoded to the raw /dev/tpm0 device Open

flashbots/attested-tls#72 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
azure: every evidence generation pays a fixed 3s sleep and an IMDS round-trip Open

flashbots/attested-tls#73 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Attestation evidence is size restricted because rustls caps Certificate handshake message at 64kb Open

flashbots/attested-tls#75 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
GCP Provenance check - make configurable confidential host registry URL Open

flashbots/attested-tls#82 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Allow verification at an explicit timestamp, and report which collateral was used Open

flashbots/attested-tls#84 · 7 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Verifier fetches collateral and verifies quotes the policy will always reject Open

flashbots/attested-tls#87 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Separate appraisal from verification: verify_attestation always applies a policy, and appraisal can fetch Open

flashbots/attested-tls#92 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026

A short digest of beginner-friendly GitHub issues.