Attestation Mechanisms for Trusted Execution Environments Demystified
arXiv:2206.03780 · doi:10.1007/978-3-031-16092-9_7
Abstract
Attestation is a fundamental building block to establish trust over software systems. When used in conjunction with trusted execution environments, it guarantees the genuineness of the code executed against powerful attackers and threats, paving the way for adoption in several sensitive application domains. This paper reviews remote attestation principles and explains how the modern and industrially well-established trusted execution environments Intel SGX, Arm TrustZone and AMD SEV, as well as emerging RISC-V solutions, leverage these mechanisms.
This publication incorporates results from the VEDLIoT project, which received funding from the European Union's Horizon 2020 research and innovation programme under grant agreement No 957197. arXiv admin note: substantial text overlap with arXiv:2204.06790
References in corpus (5)
- SGX-Aware Container Orchestration for Heterogeneous Clusters
- Twine: An Embedded Trusted Runtime for WebAssembly
- Insecure Until Proven Updated: Analyzing AMD SEV's Remote Attestation
- HECTOR-V: A Heterogeneous CPU Architecture for a Secure RISC-V Execution Environment
- Developing Secure Services for IoT with OP-TEE: A First Look at Performance and Usability