Remote Attestation - kunisuzaki/misc GitHub Wiki
Survey paper
- Principles of remote attestation[International Journal of Information Security 2011]
- A Survey on Hardware Approaches for Remote Attestation in Network Infrastructures[arXiv 20] Survey for hardware-based attestation, sostware-based attestation, and hybrid attestation.
- Remote Attestation: A Literature Review[arXiv'21] Survey for singular attestation and swarm Attestation.
- A Survey of Remote Attestation in Internet of Things: Attacks, Countermeasures, and Prospects [Computers & Security21]
- Attestation Mechanisms for Trusted Execution Environments Demystified [arXiv22]
- An Exploratory Study of Attestation Mechanisms for Trusted Execution Environments [SysTEX'22] Survey for attestations of Intel SGX, Arm TrustZone, AMD SEV, RISC-V.
- Towards Interoperable Enclave Attestation: Learnings from Decades of Academic Work [FRUCT'22]
Tutorial
Imprtant paper
- Towards an Attestation Architecture for Vlockchain Networks [WWW'21] shows 2 types of attestation flows: passport flow and background flow.
TPM (Trusted Platform Module)
- tpm2-software community, Remote Attestation Good explanation.
- TCG Trusted Attestation Protocol (TAP) Information Model for TPM Families 1.2 and 2.0 and DICE Family 1.0
- TPM 2.0 Keys for Device Identity and Attestation introduces IDevID(Initial Device ID)/IAK(Initial Attestation Key) and LDevID(Local Device ID)/LAK(Local Attestation Key)
- Remote attestation of confidential VMs using ephemeral vTPMs [ACSAC2023]
FIDO (Fast IDentity Online)
Intel SGX
- SGX101 Attestaion Good expanation of Intel SGX Remote Attestation (Keys, Platform Provisioning, Remote Attestation Process)
- Intel SGX Remote Attestation is not sufficient [BlackHat'17] Paper(https://eprint.iacr.org/2017/736.pdf)
- DCAP
- Opera: Open remote attestation for intel's secure enclaves [CCS'19]
- AMI TreE
AMD SEV
- Insecure until proven updated: analyzing AMD SEV's remote attestation[CCS'19]
- VirTEE/SEV
- SNP-Guard, SNPGuard: Remote Attestation of SEV-SNP VMs Using Open Source Tools [SysTex24]
Arm CCA (Confidential Computing Architecure)
AWS Nitro
DAA (Direct Anonymous Attestaion)
- Enhanced Privacy ID from Bilinear Pairing [ePrint'09]
- A Symbolic Analysis of ECC-based Direct Anonymous Attestation[ EuroS&P'19]
Formal Verification
- VRASED: A Verified Hardware/Software Co-Design for Remote Attestation [USENIX Sec'19]
- Advancing remote attestation via computer-aided formal verification of designs and synthesis of executables: opinion [WiSec'19]
- Formal foundations for intel SGX data center attestation primitives[ICFEM'20]
- Demystifying attestation in intel trust domain extensions via formal verification[IEEE Access'21]
- Towards formalization of enhanced privacy ID (epid)-based remote attestation in intel SGX [DSD'20]
IETF RATS (Remote ATtestation procedureS)
- Remote Attestation Procedures Architecture
- The Entity Attestation Token (EAT)
- Direct Anonymous Attestation for the Remote Attestation Procedures Architecture
Application
- Androd
- Attestation
- Key Attestation from Android 7.1
- ID Attestation from Android 8.0
- Attestation
CCC(Confidential Computing Consortium)
- Tech: Attestation
- Veraison Open souce software
- Gramine Open souce software
- Veracruz Open souce software