OPEN SOURCE AUDIT
100% open source code. Independently verify the integrity of our AMD SEV-SNP enclave from your terminal.
AMD SEV-SNP Measurement
14195fde36852b69f2ac17166ebf3223351b1c34814f110339412652819073e061ed7c47e6e00d02a817aeb4992ce20d
Source Code
0520a8c
Public API
The enclave exposes a public endpoint to retrieve AMD SEV-SNP attestation. Verify this attestation before sending credentials.
https://enclave.auditzk.com:3050/api/v1/attestationResponse example
{
"attestation": {
"verified": true,
"sevSnpEnabled": true,
"vcekVerified": true,
"measurement": "b747d554..."
},
"tlsBinding": {
"fingerprint": "75:D0:6C:C3...",
"bound": true
}
}Verify that the enclave runs exactly the code published on GitHub. 4 simple steps from your terminal.
Clone repository
Get the source code
Clone repository
Get the source code
git clone https://github.com/AuditZK/zero-knowledge-aggregator.git cd zero-knowledge-aggregator && git checkout 0520a8c
Get attestation
From your terminal
Get attestation
From your terminal
curl -s -k https://enclave.auditzk.com:3050/api/v1/attestation
Verify AMD signature
Using snpguest
Verify AMD signature
Using snpguest
cargo install snpguest snpguest fetch ca --endorser vcek ./certs snpguest verify attestation ./certs report.bin
Compare hashes
Final validation
Compare hashes
Final validation
curl -sL https://github.com/AuditZK/zero-knowledge-aggregator/releases/latest/download/measurement.txt -o expected.txt snpguest display report report.bin | grep measurement > actual.txt diff expected.txt actual.txt && echo "Match" || echo "DANGER"
Hash Match
Audited code confirmed
Hash Different
Do not send credentials
git clone https://github.com/AuditZK/zero-knowledge-aggregator.gitcurl -s -k https://enclave.auditzk.com:3050/api/v1/attestationsnpguest verify attestation ./certs report.bindiff expected.txt actual.txtRequired tools
snpguest
Official AMD tool to verify SEV-SNP attestations
curl / curl.exe
Fetch attestation (native on Linux/macOS/Windows 10+)
git
Clone source code for audit
fc / diff
Compare files (fc on Windows, diff on Linux/macOS)
DON'T TRUST, VERIFY
Our security model is built on verifiable cryptographic proofs, not promises.