go-atls provides tls.Config types for enabling remote attestation over TLS from Confidential VMs on AMD SEV/SNP.

All code comes from the amazing contrast project from Edgeless Systems, was licensed under AGPL3. Consequently, this project is also licensed under the AGPL3 license.

Check example apps.

• Provide high-level APIs (i.e. go-atls/snpapi) for common aTLS scenarios
• Do not favor a single Application protocol (gRPC) - love them all equally.
• As few lines of code trusted (TCB) as possible - specially on the TEE side
• As few communities trusted as possible

Documented here.

The forked code from contrast project has been stripped down, but the kept code is mostly unchanged. I am pretty sure that it is just as "production ready" as the original Contrast code is.

However, the example applications have not been scrutinized so I would be careful about using them for something serious at this point.