trustedhash is a challenge from R3CTF 2026. It explores whether TPM 2.0, Secure Boot, measured boot, and Linux Lockdown can be combined to approximate a Trusted Execution Environment (TEE) on a machine controlled by the player. The challenge asks players to recover a dynamically supplied flag from an attested hashing workflow without breaking the underlying cryptographic primitives.
For the challenge design, intended solution, unintended solutions, and postmortem, see the writeup or its Chinese version.
challenge/contains the player-facing attachment distributed during the competition, including the source code and local build and runtime tooling.operator/contains the operator-side deployment materials, including the player portal, container configuration, and deployment notes.writeup.mdcontains the full challenge writeup and postmortem.writeup-zh.mdis the Chinese version of the writeup.flake.nixandflake.lockdefine the top-level Nix workspace used to build and develop the challenge and operator components.