TEE API Server Toolkit by pQCee

about pQCee

pQCee.com is a quantum cybersecurity startup that designs and builds post-quantum products and solutions to strengthen and protect the next generation of computing against quantum attacks. Please contact info@pqcee.com for more offerings. For more information about this product or pQCee, please visit https://www.pqcee.com/.

about TEE API Server Toolkit

The project aims to demonstrate the use of a quantum-resistant cryptographic algorithm in a hardware-secured environment. This can be achieved by delivering the SPP algorithm in a web server running in a Trusted Execution Environment, which for this project, the Intel Software Guard Extension (SGX) platform has been chosen.

The desired outcome would be the ability to generate and verify quantum-safe cryptographic ECDSA signatures, in a secure environment where no other code can read or tamper with the data.

What is this manual about?

This manual is a guide to the TEE API Server Toolkit. It provides information on how to use the toolkit, set up the virtual machine, and the API reference.

Table of Contents

• 1. How to use pQCee TEE API Server
  • 1.1. Server Initialisation
  • 1.2. Overview of APIs
    • 1.2.1. Transport Key Setup using API
    • 1.2.2. ML-KEM Cryptographic Functions
    • 1.2.3. SPP-ECDSA Cryptographic Functions
    • 1.2.4. ML-DSA Cryptographic Functions
  • 1.3. Example Usage
• 2. Setting Up pQCee TEE API Server in an Azure VM
  • 2.1. 1. Create an Intel SGX Compatible Azure Virtual Machine
  • 2.2. 2. Setting Up the VM
    • 2.2.1. Enarx
    • 2.2.2. Installation of Intel packages and Enarx
  • 2.3. 3. Start the server
• 3. API Reference
  • 3.1. GET /init_server
  • 3.2. POST /load_tk
  • 3.3. GET /mlkem_keygen
  • 3.4. POST /mlkem_decrypt
  • 3.5. POST /tofrontdecrypt
  • 3.6. GET /keygen
  • 3.7. POST /sign
  • 3.8. POST /verify
  • 3.9. GET /mldsa_keygen
  • 3.10. POST /mldsa_sign
  • 3.11. POST /mldsa_verify