HOW ANCHORAGE DIGITAL AND TURNKEY VERIFY CODE WITH AWS NITRO ENCLAVES

Summary from the TLDR InfoSec newsletter

Anchorage Digital and Turnkey ran the open-source VisualSign transaction parser inside AWS Nitro Enclaves, where each parsed result was signed with an ephemeral P-256 key and bundled with a Nitro attestation document whose PCRs wallets checked against reproducible builds. The design let wallets prove that unmodified, audited code decoded a transaction, removing blind trust in crypto transaction signing by providing verifiable attestation rather than relying solely on network identity or operator trust. The open-source awsnitroverifier Go library handles certificate-chain and PCR validation, which any organization can use to verify their services running in AWS Nitro.