Page cover

2. Solution Architecture

2.1 High-Level Architecture

spinner

Legend:

  • πŸ”’ Solid border = Production ready

  • Dashed border = Phase 2 feature

2.2 Technology Stack

Layer
Technology
Purpose

Hardware

Intel TDX / AMD SEV-SNP

Memory encryption, isolation

Platform

Secret Network SecretVM

TEE orchestration, attestation

Runtime

Go 1.23

Service implementation

Crypto

NIST PQC Reference (C via CGO)

Dilithium3, Kyber768

API

RESTful JSON (Gin framework)

Client interface

Auth

JWT / Chain signatures

Multi-modal authentication

Storage

Encrypted filesystem

Key persistence

Future

AWS CloudHSM (FIPS 140-2 L3)

Hardware key isolation

2.3 Deployment Platform: SecretVM

Cryptic deploys on Secret Network's SecretVM infrastructure:

SecretVM Benefits:

  • Automatic Attestation: Remote attestation on port 29343

  • Encrypted Volume: /mnt/encrypted managed by on-chain KMS

  • Docker-Based: Standard containerization with TEE guarantees

  • Production Ready: Used by multiple confidential computing applications

Last updated