Privasys

Acknowledgments

Open-source projects and standards that power the Privasys platform.

Privasys builds on the shoulders of outstanding open-source projects and industry standards. We are grateful to every maintainer and contributor behind the software listed below.

Trusted Execution Environments

ProjectDescriptionLicense
Intel SGX SDKIntel's Software Guard Extensions SDK for LinuxBSD-3-Clause
Apache Teaclave SGX SDKRust SDK for Intel SGX development (Apache Teaclave)Apache-2.0
Intel TDXIntel Trust Domain Extensions for confidential VMs-
AMD SEV-SNPAMD Secure Encrypted Virtualisation - Secure Nested Paging-
go-tdx-guestGo library for TDX guest attestationApache-2.0

Rust Ecosystem

CrateRole in PrivasysLicense
rustlsPure-Rust TLS 1.3 stack used by both the RA-TLS server and HTTPS egress clientApache-2.0 / MIT
ringCryptographic primitives (AES-GCM, ECDSA, HKDF) inside SGXISC
rcgenX.509 certificate generation for RA-TLS leaf and CA certificatesApache-2.0 / MIT
webpkiCertificate verification (rustls-webpki)ISC
WasmtimeWebAssembly runtime (Privasys SGX fork) for in-enclave WASM executionApache-2.0
serdeSerialisation framework for configuration and RPC payloadsApache-2.0 / MIT
x509-parserX.509 certificate parsing for RA-TLS client verificationApache-2.0 / MIT
getrandomEntropy source, using the rdrand feature for hardware random inside SGXApache-2.0 / MIT
httparseHTTP/1.1 request parsing for the enclave's inbound serverApache-2.0 / MIT
webpki-rootsMozilla root CA bundle for HTTPS egress to public serversMPL-2.0

Go Ecosystem

ProjectRole in PrivasysLicense
GoLanguage runtime for Caddy RA-TLS module and Go RA-TLS client (Privasys fork with RA-TLS challenge-response support)BSD-3-Clause
CaddyWeb server / reverse proxy that hosts the RA-TLS moduleApache-2.0
xcaddyBuild tool for custom Caddy modulesApache-2.0
CertMagicAutomatic TLS certificate management for CaddyApache-2.0
zapStructured loggingMIT

.NET & Other Clients

ProjectRole in PrivasysLicense
.NETRuntime for the C# RA-TLS clientMIT
PythonLanguage for the Python RA-TLS clientPSF
TypeScript / Node.jsRuntime for the TypeScript RA-TLS clientMIT

Build & Tooling

ToolRole in PrivasysLicense
CMakeBuild system orchestration for the Enclave OS host + enclaveBSD-3-Clause
CargoRust package manager and build systemApache-2.0 / MIT
cc (crate)C/C++ build integration for Rust build scriptsApache-2.0 / MIT

Access management

ToolRole in PrivasysLicense
ZitadelOIDC server for the Privasys PlatformAGPL-3.0 license

Documentation

ProjectRoleLicense
FumadocsDocumentation framework powering this siteMIT
Next.jsReact framework for static site generationMIT
NxMonorepo build systemMIT

If we have missed a project that deserves recognition, please open an issue or submit a pull request.

Edit on GitHub