question regarding TDX

[dayeol]

Hello!

I have a quick question!

Where can I find the TDX zkVM guest code for risc0? It seems that the zkVM guest only implements the SGX.
https://github.com/automata-network/tdx-attestation-sdk/blob/main/zk/risc0/methods/guest/src/main.rs

Thanks in advance!

[dayeol]

I figured that verify_quote_dcapv4 implements the TDX. I got confused by these lines.

journal_output.extend_from_slice(&sgx_intel_root_ca_cert_hash);
journal_output.extend_from_slice(&sgx_tcb_signing_cert_hash);
journal_output.extend_from_slice(&sgx_intel_root_ca_crl_hash);
journal_output.extend_from_slice(&sgx_pck_crl_hash);

[smilenow]

Hello!

I have a quick question!

Where can I find the TDX zkVM guest code for risc0? It seems that the zkVM guest only implements the SGX. https://github.com/automata-network/tdx-attestation-sdk/blob/main/zk/risc0/methods/guest/src/main.rs

Thanks in advance!

Currently Intel SGX v3 / v4 and Intel TDX v4 Quote Verification are located in dcap-rs. And in Risc0 and SP1 guest program use this for the verification.

[smilenow]

I figured that verify_quote_dcapv4 implements the TDX. I got confused by these lines.

journal_output.extend_from_slice(&sgx_intel_root_ca_cert_hash);
journal_output.extend_from_slice(&sgx_tcb_signing_cert_hash);
journal_output.extend_from_slice(&sgx_intel_root_ca_crl_hash);
journal_output.extend_from_slice(&sgx_pck_crl_hash);

These wordings are coming from the official Intel SGX DCAP docs and SGXDataCenterAttestationPrimitives repo.