Effortlessly build confidential apps in Go

EGo is an open-source SDK that enables you to develop your own confidential apps in the Go programming language.

GitHub Enterprise support

Leverage the benefits of confidential computing without changing your code

Many existing Go applications run on EGo without modification. It dramatically reduces the effort required to create confidential apps and microservices. Apps that benefit from enclaves are typically server applications that deal with sensitive data like cryptographic keys or payment data.

UntrustedComputer (Cloud)EnclaveYour DataYour CodeGo RuntimeOSHypervisorUserSecureChannel(TLS)
sudo snap install ego-dev --classic
ego-go build helloworld.go
ego sign helloworld
ego run helloworld
You don’t need to refactor your code to run it in a secure enclave. With three simple commands, you can build, sign, and run projects of any size securely. From "hello world" to HashiCorp Vault.

Why developers love EGo

Super secure, always encrypted

All your data and code are kept inside the secure enclaves at runtime. No need to partition your app.

Runs everywhere

EGo apps run in simulation mode on any host—not only on SGX-enabled hardware.

Lightweight

EGo does not try to simulate a full POSIX environment in your enclave. It just loads as much code as necessary for the Go runtime to work well, keeping the trusted computing base (TCB) small.

Easy and seamless integration

To use Intel® SGX features like sealing or remote attestation, you only need to import EGo’s enclave library and access everything in a single line of code.

Easy to scale

For extending the properties of a single enclave to a Kubernetes cluster, EGo works best with MarbleRun. MarbleRun is an open-source control plane that simplifies deploying, scaling, and verifying SGX-based apps on Kubernetes.

Built on industry standards

EGo builds on the Open Enclave SDK, an open-source framework for building applications based on trusted execution environments.

Simplifying enclave development

We aim to simplify the work developers need to do to protect their data. EGo provides user-friendly tools, including a modified Go compiler and a Go library. The compiler adapts your code to run inside an enclave while still allowing your EGo-compiled apps to run outside enclaves. The Go library verifies that your trusted environment is secure (remote attestation) and securely stores your data in an untrusted environment (sealing).

Build confidential apps with ease

Effortlessly build, debug, and run Go apps in secure enclaves. Use the documentation to get started.

Documentation GitHub