RiscZero enables trustless on-chain verification of TEE attestations with Phala
Solutions Implemented
TEE Attestation Workflow
Report Generation: Intel SGX enclave generates a signed report containing program/hardware measurements.
Collateral Fetch
Verification collateral (public keys, hardware status) is retrieved from Intel's Provisioning Service (PCS).
zkVM Off-Chain Verification
RiscZero's zkVM executes Rust-based verification logic (parsing X.509 certificates, validating P256 signatures) off-chain.
STARK to SNARK Conversion
Generates a STARK proof of correct verification, converted into a Groth16 SNARK proof for Ethereum compatibility.
On-Chain Validation
SNARK proof is verified via a gas-efficient smart contract (~250k gas), replacing costly direct attestation checks on Ethereum.
Key Benefits
Cost Efficiency
Reduces gas costs by ~90% compared to native on-chain verification (millions → 250k gas).
Trust Minimization
Eliminates reliance on Intel's centralized PCS; collateral can be hosted on-chain or decentralized nodes.
Enhanced Security
zkVM ensures tamper-proof verification logic, complementing TEE's hardware-backed isolation.
EVM Compatibility
Groth16 proofs enable seamless integration with Ethereum and other EVM chains.
Future-Proof
Plans to support Intel TDX (Remote Attestation v4) and RiscZero's Bonsai prover for faster proof generation.
Ready to Build?
Explore how Phala Cloud can power your project with TEE technology. Get started for free today.
More Cases
