Technology Category
Application Domains: SecurityData Mining & Knowledge Management: Representing, Reasoning, and Using Provenance, TrustMultiagent Systems: Mechanism Design
TrustMee: Self-Verifying Remote Attestation Evidence
Technology Category
Application Category
📝 Abstract
Hardware-secured remote attestation is essential to establishing trust in the integrity of confidential virtual machines (cVMs), but is difficult to use in practice because verifying attestation evidence requires the use of hardware-specific cryptographic logic. This increases both maintenance costs and the verifiers'trusted computing base. We introduce the concept of self-verifying remote attestation evidence. Each attestation bundle includes verification logic as a WebAssembly component signed by a trusted party. This approach transforms evidence verification into a standard code-signing problem: the verifier checks the signature on the embedded logic and then executes it to validate the evidence. As a result, verifiers can validate attestation evidence without any platform-specific knowledge. We implement this concept as TrustMee, a platform-agnostic verification driver for the Trustee framework. We demonstrate its functionality with self-verifying evidence for AMD SEV-SNP and Intel TDX attestations, producing attestation claims in the standard EAT Attestation Result (EAR) format.
Problem
Research questions and friction points this paper is trying to address.
remote attestation
hardware security
trusted computing
confidential virtual machines
attestation evidence
Innovation
Methods, ideas, or system contributions that make the work stand out.
self-verifying attestation
WebAssembly
remote attestation
trusted computing base
platform-agnostic verification
🔎 Similar Papers
No similar papers found.
