Skip to content

Implement internal PCCS#144

Draft
ameba23 wants to merge 4 commits intomainfrom
peg/internal-pccs
Draft

Implement internal PCCS#144
ameba23 wants to merge 4 commits intomainfrom
peg/internal-pccs

Conversation

@ameba23
Copy link
Collaborator

@ameba23 ameba23 commented Feb 26, 2026

This is intended to speed up verification.

Related issue: #27

Summary

  • Added a Pccs collateral cache component and wired DCAP verification to use it instead of fetching collateral directly each time.
  • Implemented cached collateral lookup plus explicit refresh behavior for stale entries.
  • Updated attestation verifier construction to initialize and carry an internal Pccs instance.

Key changes

  • Added new module: pccs.rs (/home/pumkin/src/flashbots/attested-tls-proxy/attested-tls/src/attestation/pccs.rs)
    • Pccs::get_collateral now returns (collateral, is_fresh) to indicate cache hit vs network fetch.
    • Pccs::refresh_collateral always refetches and overwrites cache.
  • Updated DCAP flow in dcap.rs (/home/pumkin/src/flashbots/attested-tls-proxy/attested-tls/src/attestation/dcap.rs)
    • Uses Pccs for collateral retrieval.
    • Retries verification once with refreshed collateral only when the first attempt used cached collateral.
    • Avoids redundant second verification when first attempt already used fresh collateral.
  • Updated verifier wiring in mod.rs (/home/pumkin/src/flashbots/attested-tls-proxy/attested-tls/src/attestation/mod.rs), plus call-site updates in main.rs (/home/pumkin/src/flashbots/
    attested-tls-proxy/src/main.rs) and lib.rs (/home/pumkin/src/flashbots/attested-tls-proxy/src/lib.rs).

@ameba23 ameba23 marked this pull request as draft February 26, 2026 14:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant