block-explorer icon indicating copy to clipboard operation
block-explorer copied to clipboard

Feature Request: TEE-verified badge

Open pbeza opened this issue 1 year ago โ€ข 3 comments

๐ŸŒŸ Feature Request

๐Ÿ“ Description

We are now generating TEE proofs alongside ZK proofs as part of the multi-prover work. It would be great to show TEE proofs in the block explorer, along with info on how to verify them.

Once we have on-chain verification in place, we can add a badge next to each batch that automatically shows the result of the on-chain TEE proof verification. For now, the best way to verify TEE proofs is by using the Docker image we provide.

๐Ÿค” Rationale

Users should be able to easily verify the TEE proofs we produce if they want to.

๐Ÿ“‹ Additional Context

  • Demo
  • Relevant notion thread
  • Getting the TEE proof for sample batch number 494384 on mainnet:
    curl -X POST \
      -H "Content-Type: application/json" \
      --data '{"jsonrpc": "2.0", "id": 1, "method": "unstable_getTeeProofs", "params": [494384, "sgx"] }' \
      https://mainnet.era.zksync.io
    
  • Verifying the TEE proof for sample batch number 494384 on mainnet:
    docker run -i \
      --rm matterlabsrobot/verify-era-proof-attestation:latest \
      --batch 494384 \
      --rpc https://mainnet.era.zksync.io \
      --sgx-allowed-tcb-levels Ok,SwHardeningNeeded
    

pbeza avatar Nov 25 '24 09:11 pbeza

@pbeza Probably this part is to be handled by another issue, since it's not actionable now.

Once we have on-chain verification in place, we can add a badge next to each batch that automatically shows the result of the on-chain TEE proof verification. For now, the best way to verify TEE proofs is by using the Docker image we provide.

Maybe it would be fair to display the badge together with the link to the proof now, even though it's not enforced by L1 contract? We can add hover text on the badge saying that the proof can be verified by anyone, but is currently not enforced by the L1 contract.

popzxc avatar Nov 25 '24 09:11 popzxc

Probably this part is to be handled by another issue, since it's not actionable now.

Yep, that was my intention โ€“ to leave it for now since we havenโ€™t integrated TEE proof on-chain verification yet.

Maybe it would be fair to display the badge together with the link to the proof now, even though it's not enforced by L1 contract? We can add hover text on the badge saying that the proof can be verified by anyone, but is currently not enforced by the L1 contract.

Sounds fine to me โ€“ I donโ€™t have a strong opinion on this. cc-ing @haraldh in case he has a better idea.

pbeza avatar Nov 25 '24 11:11 pbeza

Yeah, a Verified by TEE badge which links to a page explaining what it means and how to verify manually.

haraldh avatar Nov 28 '24 11:11 haraldh