Hardware-based attestation / intrusion detection app for Android devices. It provides both local verification with another Android device via QR codes and optional scheduled server-based verification with support for alert emails. It uses hardware-backed keys and attestation support as the foundation and chains trust to the app for software checks.
sgxcclib is used in the respective enclaves (in ecc_enclave and tlcc_enclave) with a common part in common/sgxcclib. A better name would probably include an fpc_ and/or an enclave prefix, and or a _t/_u to distinguish the trusted and untrusted functions -- though sgxcclib is used in untrusted space, essentially as an enclave wrapper.
Server code for use with the Auditor app: https://github.com/GrapheneOS/Auditor. It provides two services: submission of attestation data samples and a remote attestation implementation with email alerts to go along with the local implementation based on QR code scanning in the app.
A small subset of the submitted sample data from https://github.com/GrapheneOS/Auditor. It has a sample attestation certificate chain per device model (ro.product.model) along with a subset of the system properties from the sample as supplementary information.
MySQL online replication consistency check tool - it works by executing checksum queries on the master and all slaves, which produces different results on replicas that are inconsistent with the master
sgxcclib is used in the respective enclaves (in ecc_enclave and tlcc_enclave) with a common part in
common/sgxcclib. A better name would probably include anfpc_and/or anenclaveprefix, and or a_t/_uto distinguish the trusted and untrusted functions -- though sgxcclib is used in untrusted space, essentially as an enclave wrapper.