Cases/RiscZero

RiscZero enables trustless on-chain verification of TEE attestations with Phala

Solutions Implemented

TEE Attestation Workflow

Report Generation: Intel SGX enclave generates a signed report containing program/hardware measurements.

Collateral Fetch

Verification collateral (public keys, hardware status) is retrieved from Intel's Provisioning Service (PCS).

zkVM Off-Chain Verification

RiscZero's zkVM executes Rust-based verification logic (parsing X.509 certificates, validating P256 signatures) off-chain.

STARK to SNARK Conversion

Generates a STARK proof of correct verification, converted into a Groth16 SNARK proof for Ethereum compatibility.

On-Chain Validation

SNARK proof is verified via a gas-efficient smart contract (~250k gas), replacing costly direct attestation checks on Ethereum.

Key Benefits

Cost Efficiency

Reduces gas costs by ~90% compared to native on-chain verification (millions → 250k gas).

Trust Minimization

Eliminates reliance on Intel's centralized PCS; collateral can be hosted on-chain or decentralized nodes.

Enhanced Security

zkVM ensures tamper-proof verification logic, complementing TEE's hardware-backed isolation.

EVM Compatibility

Groth16 proofs enable seamless integration with Ethereum and other EVM chains.

Future-Proof

Plans to support Intel TDX (Remote Attestation v4) and RiscZero's Bonsai prover for faster proof generation.

Ready to Build?

Explore how Phala Cloud can power your project with TEE technology. Get started for free today.

More Cases