Apache Teaclave is a universal secure computing platform designed for privacy-sensitive data. It enables developers to perform computations like machine learning and private set intersection within Trusted Execution Environments (TEEs), offering hardware-based isolation and attestation via Intel SGX.

How It Works

Teaclave operates as a Function-as-a-Service (FaaS) platform, leveraging Rust for memory safety. It utilizes Intel SGX for hardware-based security, including memory encryption and remote attestation. The platform supports pre-built functions and allows custom Python script execution, catering to both general secure computing and multi-party computations. Its containerized components facilitate deployment across local and cloud environments.

Quick Start & Requirements

• Install/Run: Deployment instructions are available for local and cloud environments (e.g., Azure Confidential Computing VM).
• Prerequisites: Intel SGX hardware is required for full functionality. Python 3.x is needed for client SDKs.
• Resources: Setup complexity and resource requirements vary based on deployment.
• Links: Getting Started, Deploying on Azure, Python SDK

Highlighted Details

• Hardware-based isolation and attestation via Intel SGX.
• Function-as-a-Service model supporting custom Python scripts.
• Modular design with reusable SDKs (SGX, TrustZone, Java).
• Written in Rust for memory safety.

Maintenance & Community

• Apache Software Foundation project.
• Community contributions are welcomed.
• Mailing list and Twitter (@ApacheTeaclave) for community engagement.

Licensing & Compatibility

• Apache License 2.0.
• Permissive license suitable for commercial use and integration with closed-source projects.

Limitations & Caveats

• Requires specific hardware (Intel SGX) for core security features, limiting broad adoption.
• As an incubating project, APIs and features may be subject to change.