#cosmwasm #sgx #cycle #cosmos #quartz

no-std quartz-contract-core

A CosmWasm framework for securely interacting with Intel SGX enclaves

1 unstable release

0.1.0 Oct 16, 2024

#5 in #quartz

Download history 178/week @ 2024-10-11 131/week @ 2024-10-18 41/week @ 2024-10-25 8/week @ 2024-11-01

272 downloads per month
Used in 2 crates

Apache-2.0

84KB
1.5K SLoC

Quartz CosmWasm (quartz-contract-core)

Quartz CosmWasm (quartz-contract-core) is a high-level framework for building attestation-aware smart contracts on CosmWasm. It provides a robust foundation for developing secure, Intel SGX-based contracts with built-in remote attestation support.

Features

  • Attested<M, A> wrapper for a message and its attestation
  • MockAttestation type for development ease
  • Session management for secure communication between contract and enclave
  • Verify DCAP attestations (by calling dcap-verifier and tcbinfo contracts)
  • Mock SGX support for testing environments

See also the spec.md

Installation

Add quartz-contract-core to your Cargo.toml:

[dependencies]
quartz-contract-core = { path = "../packages/quartz-contract-core" }

Usage

Here's a basic example of how to use quartz-contract-core in your CosmWasm contract:

use quartz_cw::prelude::*;
use cosmwasm_std::{DepsMut, Env, MessageInfo, Response};

pub fn execute(
    deps: DepsMut,
    env: Env,
    info: MessageInfo,
    msg: QuartzExecuteMsg,
) -> Result<Response, ContractError> {
    match msg {
        QuartzExecuteMsg::Attested(attested_msg) => {
            // Handle attested message
            // Verification of the attestation is done automatically
            let result = attested_msg.handle(deps, env, info)?;
            Ok(result)
        },
        // Other message handlers...
    }
}

Key Components

  1. Attested<M, A>: A wrapper struct for holding a message and its attestation.
  2. Attestation: A trait for attestation types (DCAP, Mock).
  3. HasUserData: A trait for extracting user data from attestations.
  4. RawHandler: A trait for handling raw messages.

Configuration

You can enable mock SGX support for testing by adding the mock-sgx feature to your Cargo.toml:

[dependencies]
quartz-contract-core = { path = "../packages/quartz-contract-core", features = ["mock-sgx"] }

Testing

To run the tests:

cargo test

Dependencies

~17–29MB
~558K SLoC