... stands for Certificate Authority trusted Remote Attestation TLS
aka Let's Encrypt for TEEs.
Idea is:
TLS session trusted by Root CA (Let's Encrypt)
..encapsulates TLS session with TEE bootstrapped self-signed certificate
....verifies TEE attestation token inline
......use TlsStream<TlsStream<TcpStream>> for regular client/server comms
Also supports WASM.
cargo test
// client
let tee_tls_connector = TeeTlsConnector::new(...);
let tee_tls_stream = tee_tls_connector.connect(stream).await?;
// server
let tee_tls_acceptor = TeeTlsAcceptor::new(...);
let tee_tls_stream = tee_tls_acceptor.accept(stream).await?;