ELASTIC D3.1: Lightweight Confidential Computing Platform - Initial version

This deliverable presents the initial specification and design of the ELASTIC lightweight confidential computing platform, which aims to provide a secure, efficient, and portable execution environment for privacy-sensitive workloads. The platform leverages Trusted Execution Environments (TEEs) and WebAssembly (Wasm) to enable secure and architecture-agnostic deployment across heterogeneous edge, cloud, and embedded environments. The document defines a Hardware Abstraction Layer (HAL) to enable interoperability across platforms, details support for secure system services such as cryptographic material distribution, and addresses mechanisms for remote attestation using standard and platform-specific approaches. The document also explores the integration of Wasm runtimes with TEEs, secure memory and I/O handling, cryptographic services, remote attestation procedures, and workload orchestration. This initial version lays the foundation for a privacy-preserving computing framework capable of supporting secure function-as-a-service (FaaS) deployments and cross-platform workload migration, aligned with the broader goals of the ELASTIC project.