EdgelessDB - MySQL-compatible database for confidential computing

EdgelessDB is a full SQL database, tailor-made for confidential computing. It seamlessly integrates with your existing tools and workflows to help you unlock the full potential of your data. All data stored and processed in EdgelessDB is always encrypted and isolated—even in system memory at runtime. Your data is protected even from rogue system administrators, rootkits, and other powerful attackers. This makes EdgelessDB the most secure and most versatile option available for both storing and processing data.

Architecturally, EdgelessDB is based on MariaDB. As storage engine, it uses an enhanced version of RocksDB. The file encryption of EdgelessDB's storage engine is designed and built for the enclave and its very strong attacker model. In this context, EdgelessDB's storage engine provides confidentiality, integrity, freshness, auditability, and recoverability for data. Other databases, even when running inside enclaves using general-purpose frameworks, do not have these security properties.