@teechat/attested-mtls
v0.1.0
Published
WASM bindings for attested-mtls (browser / Capacitor)
Readme
attested-mtls
Public Trusted Computing Base (TCB) for attested mTLS used by TeeChat:
- InferenceEngine (engine → gateway dial)
- TeaChat gateway (cert hash / pin helpers)
- OpenAPI edge (F′ privileged dial TLS identity)
- OPE clients (shared SPKI / cert digest helpers)
Artifacts
| Artifact | Consumers |
|----------|-----------|
| libattested_mtls.so | Node (engine / gateway) via FFI |
| @teechat/attested-mtls (WASM) | Browser / Capacitor |
| Rust crate attested-mtls | OpenAPI, Tauri, native tools |
Crypto envelopes remain in OPE. This crate owns TLS identity load, certificate digests/pins, and challenge-binding helpers — not OPE hybrid encryption.
Develop
cargo test --workspace
cargo clippy --workspace -- -D warnings
cargo build -p attested-mtls-ffi --releaseLicense
Apache-2.0
