1 Introduction

Short Intro

Integritee is a highly scalable, privacy-enabling network in the Polkadot ecosystem with parachains on Polkadot and Kusama. We seek to become the leading Web3 privacy solution - a blockchain network for developers and relevant to enterprises to build (decentralized) applications that benefit from unrivaled speed, verifiable confidentiality/privacy, and interoperability. At scale.

Our solution combines the security and trust of Polkadot, the scalability of second-layer solutions, and the confidentiality of Trusted Execution Environments (TEEs) - a special-purpose hardware inside which computations run securely, confidentially, and verifiably. Our technology is relevant to both Web3 developers and enterprises who would like to benefit from verifiable privacy and public auditability.

For Web3 developers, we offer powerful tools to build strong decentralized solutions for multiple use cases: From decentralized gaming providers who require low latencies and scalability to compete with traditional gaming, to decentralized exchanges (DEXs) wanting to avoid front-running, and identity protocols seeking to keep sensitive information private, the scope is ample. Integritee also bridges the gap between Web3 and Web2 with a trusted oracle framework to ensure interoperability with real-world data.

Through our technology, we solve pressing challenges that blockchain solutions currently face, namely performance, privacy, scalability issues, and a lack of interoperability. While this enhanced blockchain value proposition is highly relevant to Web3 projects seeking to overcome these challenges, we truly believe that we can greatly increase blockchain adoption also for enterprise stakeholders by enabling totally new and improved use cases for decentralized applications.

Apart from our strong Web3 value proposition, enterprises can leverage our unique solution for verifiable privacy and public auditability. Data is processed and applications run in a secure TEE. The integrity and genuineness of the TEE and the hash of the binary it is executing are subsequently verified and a respective proof registered on our public ledger, making it transparent to any third party. This combination of verifiable privacy and public auditability provides a significant benefit, e.g., for institutions that want to prove data security and sovereignty to their customers or in case of data sharing collaborations between multiple parties.

Overview

In the following chapters, we will offer insight into the fundamentals of the Integritee network, and its benefits for developers, companies, and users. We will also highlight and explain our main goals.

Further down, you will find Dev and DevOps-oriented content to guide those who wish to build on our platform.

Table of Contents

• 1 Introduction
• 2 Integritee Network
  • 2.1 What is the function of the Integritee network?
    • 2.1.1 A public registry of remote attestation
    • 2.1.2 Why not just use the Intel Attestation Service (IAS)?
  • 2.2 Polkadot
    • 2.2.1 Shared security for parachains
    • 2.2.2 Auctions
    • 2.2.3 Slot Lease periods
    • 2.2.4 Crowdloans
  • 2.3 Integritee Network Architecture
  • 2.4 TEER token
    • 2.4.1 How to Set Up a Wallet
    • 2.4.2 Which wallets are supported?
    • 2.4.3 How to get TEER ?
      • 2.4.3.1 Basilisk Guide
    • 2.4.4 How to check the transaction history?
    • 2.4.5 Tokenomics
  • 2.5 Governance
    • 2.5.1 Council
    • 2.5.2 Technical Committee
    • 2.5.3 Treasury
    • 2.5.4 Democracy
  • 2.6 Infrastructure
    • 2.6.1 What are Collators and who runs them?
    • 2.6.2 What are Sidechain Validators?
  • 2.7 Privacy Technology: Trusted Execution Environments
    • 2.7.1 What is a TEE?
    • 2.7.2 What is remote attestation?
    • 2.7.3 How we use the technology to make confidential computation publicly verifiable
    • 2.7.4 Intel SGX
      • 2.7.4.1 Why SGX and not other technologies
      • 2.7.4.2 Intel SGX Security Design
  • 2.8 History
  • 2.9 Roadmap
• 3 Our Technology
  • 3.1 Software Development Kit
    • 3.1.1 Sidechains
    • 3.1.2 Trusted Off-Chain Computing
    • 3.1.3 Oracle Framework
  • 3.2 Attesteer
  • 3.3 Deployment Options
  • 3.4 Scalable Secure Kubernetes Cluster for TEEs
  • 3.5 Use cases
    • 3.5.1 Sidechains
    • 3.5.2 Trusted Off-Chain Computing
    • 3.5.3 TEEracle - Oracle Framework
    • 3.5.4 Attesteer
• 4 Development
  • 4.1 High-level overview of components
  • 4.2 SDK Versioning
  • 4.3 Design
    • 4.3.1 L2 Sidechain
      • 4.3.1.1 Motivation & Introduction
      • 4.3.1.2 Multi-validateer setup
      • 4.3.1.3 Block production
      • 4.3.1.4 Validateer components
      • 4.3.1.5 On-boarding of new validateers
    • 4.3.2 System and Networking Overview
  • 4.4 SDK
    • 4.4.1 Sidechain SDK
    • 4.4.2 Trusted Off-chain Worker
    • 4.4.3 TEEracle - Oracle Framework
    • 4.4.4 Custom Business Logic / STF
      • 4.4.4.1 Example: Encointer
    • 4.4.5 How To Access On-chain Storage
    • 4.4.6 RPC Interface
    • 4.4.7 Integritee Parachain Integration
  • 4.5 Attesteer
  • 4.6 Demos
    • 4.6.1 Sidechain demo
    • 4.6.2 TOCW demo
    • 4.6.3 TEEracle demo
  • 4.7 Performance Benchmarking
  • 4.8 Hardware Diversification
    • 4.8.1 Distributor-Level Remote Attestation
    • 4.8.2 Concept
    • 4.8.3 Roles
      • 4.8.3.1 Hardware Manufacturer
      • 4.8.3.2 Trusted Software Source
      • 4.8.3.3 Provision Entity
      • 4.8.3.4 Member
      • 4.8.3.5 Verifier
  • 4.9 Development Environment
• 5 Nodes & Infrastructure
  • 5.1 How to set up and run Integritee Nodes
    • 5.1.1 Full Node
      • 5.1.1.1 Parachain on Kusama
      • 5.1.1.2 Parachain on Polkadot
    • 5.1.2 Collator Node
  • 5.2 How to set up and run a Sidechain Validator Node
    • 5.2.1 Hardware Requirements
    • 5.2.2 Intel SGX Licences
    • 5.2.3 Software requirements
      • 5.2.3.1 Ansible
      • 5.2.3.2 Docker
      • 5.2.3.3 Enabling SGX Hardware support in Docker
    • 5.2.4 Build the binaries
  • 5.3 How to deploy
    • 5.3.1 Why deploy on Integritee Network
    • 5.3.2 Why use bare-metal cloud for TEE instances?
    • 5.3.3 Securitee Offering
• 6 Misc
  • 6.1 Glossary
  • 6.2 Visual Materials
  • 6.3 Community Info & Links
  • 6.4. Bug Bounty Program
• 7 Quickstart