Skip to content

Releases: Lightec-AI/teechat-attested-mtls

Release list

attested-mTLS v0.2.0 — seal-sync HPKE v3

attested-mTLS v0.2.0 — seal-sync HPKE v3 Latest
Latest

Choose a tag to compare

View all tags
@weijiguo weijiguo released this 30 Aug 14:19
v0.2.0
d40e569

Security

Closes the protocol implementation portion of TeeChat RB-54:

  • replaces plaintext key export with RFC 9180 HPKE (X25519/HKDF-SHA256/ChaCha20-Poly1305)
  • binds nonce, recipient key, TLS channel SPKI, and both identities into mutual TEE evidence
  • adds production SEV-SNP VCEK/ARK/ASK verification and strict measurement allowlists
  • makes production servers v3-only and rejects legacy plaintext endpoints
  • makes pre-export audit emission fail closed and zeroizes plaintext containers

Production deployment and replacement key ceremonies are tracked separately in TeeChat.

Assets 2
Loading

v0.1.0

v0.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 18 Jul 01:29
v0.1.0
e482a8a

Artifacts

  • libattested_mtls.so — Linux cdylib for TeeChat engine/gateway Node.
  • @teechat/attested-mtls on npm — browser/mobile WASM.
  • crates.io — attested-mtls (same semver as this tag).

Full Changelog: https://github.com/Lightec-AI/teechat-attested-mtls/commits/v0.1.0

Loading