aws-nitro-enclaves-nsm-api

AWS Nitro (and Nitro Enclaves) are general computing platforms, so it's different. You'd need to write a PCC-like system/application on top of AWS Nitro Enclaves to make a direct comparison. A breakdown of those 5 core requirements from Apple: 1. Stateless computation on personal user data - a property of the application 2. Enforceable guarantees - a property of the application; Nitro Enclaves attestation helps here 3. No privileged runtime access - maps directly to the no administrative API access in the AWS Nitro System platform 4. Non-targetability - a property of the application 5. Verifiable transparency - a mix of the application and the platform; Nitro Enclaves attestation helps here To be a little more concrete: (1 stateless) You could write an app that statelessly processes user data, and build it into a Nitro Enclave. This has a

Disclosure: I work at AWS, and I played a part in the design of this feature. But not sadly not any coding for this one. Since this is HN, I thought additional links to the open-source licensed software that we released today might be helpful. A lot of it is written in Rust. Nitro Enclaves CLI - https://github.com/aws/aws-nitro-enclaves-cli Application that uses ACM managed certificates to do TLS termination inside a Nitro Enclave - https://github.com/aws/aws-nitro-enclaves-acm A library for interacting with the TPM-like device called the Nitro Security Module (used to measure code for attestation purposes) - https://github.com/aws/aws-nitro-enclaves-nsm-api Some sample C code for use with Nitro Enclaves - https://github.com/aws/aws-nitro-enclaves-sdk-c And a sample application showing how to use vsock to communicate - https://github.com/