Licence
Apache-2.0
Version
0.1.0
Deps
0
Size
235 kB
Vulns
0
Weekly
0
attested-mtls
Public Trusted Computing Base (TCB) for attested mTLS used by TeeChat:
- InferenceEngine (engine → gateway dial)
- TeaChat gateway (cert hash / pin helpers)
- OpenAPI edge (F′ privileged dial TLS identity)
- OPE clients (shared SPKI / cert digest helpers)
Artifacts
| Artifact | Consumers |
|---|---|
libattested_mtls.so |
Node (engine / gateway) via FFI |
@teechat/attested-mtls (WASM) |
Browser / Capacitor |
Rust crate attested-mtls |
OpenAPI, Tauri, native tools |
Crypto envelopes remain in OPE. This crate owns TLS identity load, certificate digests/pins, and challenge-binding helpers — not OPE hybrid encryption.
Develop
cargo test --workspace
cargo clippy --workspace -- -D warnings
cargo build -p attested-mtls-ffi --release
License
Apache-2.0