Towards Interoperable Enclave Attestation: Learnings from Decades of Academic Work

Niemi, Arto; Sovio, Sampo; Ekberg, Jan-Erik

doi:10.23919/fruct54823.2022.9770907

Cited by 6 publications

(1 citation statement)

References 33 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Studies have compared TEE implementations and their attestation protocols [21], [39], [43], [45]. They limit themselves to point out the different characteristics of such protocols without identifying and exploring interesting synergies like we do.…”

Section: Related Workmentioning

confidence: 99%

Flexible Remote Attestation of Pre-SNP SEV VMs Using SGX Enclaves

Antonino,

Derek,

Wołoszyn

2023

IEEE Access

View full text Add to dashboard Cite

We propose a protocol that explores a synergy between two TEE implementations: it brings SGX-like remote attestation to SEV VMs. We use the notion of a trusted guest owner, implemented as an SGX enclave, to deploy, attest, and provision an SEV VM. This machine can, in turn, rely on the trusted owner to generate SGX-like attestation proofs on its behalf. Our protocol combines the application portability of SEV with the flexible remote attestation of SGX. We formalise our protocol and prove that it achieves the intended guarantees using the Tamarin prover. Moreover, we develop an implementation for our trusted guest owner together with example SEV machines, and put those together to demonstrate how our protocol can be used in practice; we use this implementation to evaluate our protocol in the context of creating accountable machine-learning models. We also discuss how our protocol can be extended to provide a simple remote attestation mechanism for a heterogeneous infrastructure of trusted components.INDEX TERMS remote attestation, trusted execution environments, SGX, SEV, security I. INTRODUCTION

show abstract