Checkpointer currently doesn't encrypt the state.
When we move to the TEE world, we will want it to use the root_key-derived-snapshot-encryption key to encrypt payloads.
It will thus have to fetch this key from the enclave.
The enclave previously contained similar snapshot endpoints. All deleted as part of SeismicSystems/enclave#176.
We can use that PR for reference to implement encryption here when needed.
Checkpointer currently doesn't encrypt the state.
When we move to the TEE world, we will want it to use the root_key-derived-snapshot-encryption key to encrypt payloads.
It will thus have to fetch this key from the enclave.
The enclave previously contained similar snapshot endpoints. All deleted as part of SeismicSystems/enclave#176.
We can use that PR for reference to implement encryption here when needed.