Project Oak

Leverages TEEs from manufacturers like AMD or Intel to provide cryptographically signed evidence of Enclave Application identity, enabling trust distribution without relying on service providers, as outlined in the Remote Attestation section.

Establishes end-to-end encrypted communication with guaranteed confidentiality, integrity, and authenticity, bound to remote attestation evidence, ensuring secure interactions between nodes.

Uses a split architecture to separate Enclave Applications (in TEEs) from untrusted Host Applications, reducing the attack surface and TCB, as described in the Split Architecture section.

Offers Oak Restricted Kernel for minimal, reviewable TCB and Oak Containers for full Linux compatibility and higher performance, catering to different security and performance trade-offs.

Integrates with verifiable logs like Rekor to publish binary artifacts, preventing undetected backdoors and enabling reproducible builds for external verification.