Questions tagged [remote-attestation]
The remote-attestation tag has no summary.
31 questions
2 votes
0 answers
60 views
Confidential Computing - Which enclave can retrieve Provisioning Key? (PvE or PcE)
I am confusing about the Provisioning Enclave and Provisioning Certificate Enclave. In the document SGX101 - Interaction between PSE and Application Enclaves, the Provisioning Enclave (PvE) and ...
- 51
3 votes
1 answer
204 views
How to prove that the private key is stored in the TPM?
I am implementing a client that generates a CSR, sends it to my own CA service, and the CA issues a certificate for that CSR. In this process, I need to verify that the csr is trusted, generated by ...
1 vote
1 answer
248 views
Do microcontroller processors like Arm Cortex-M support the TPM's Dynamic root of trust (similar to e.g. Intel TXT)?
The TPM (Trusted Platform Module) has a feature called dynamic root-of-trust. If i understand correctly a measurement of the current system is taken (to enable attestation) by the CPU and transmitted ...
- 21
0 votes
1 answer
224 views
How is the authenticity and integrity of the various chips inside laptops and mobile phones ensured by their vendors?
Modern laptops and mobile phone platforms are built around a main, beefy SoC, which generally supports Secure Boot for its firmware and also has a unique hardware identity that is used to attest to a ...
- 66
2 votes
3 answers
825 views
How to bind TPM2.0 AK to the "AK name" used in tpm2_makecredential, and how is trust established in AIK?
During remote attestation, a device sends the server the EK certificate, AK public, AK name. By using tpm2_makecredential/tpm2_activatecredential, the attestation sever can confirm that: the EK is ...
- 21
1 vote
0 answers
180 views
Is there any use case of DAA (Direct Anonymous Attestation) in TPM?
I want to know the use cases of DAA (Direct Anonymous Attestation) in the real world.
- 11
1 vote
1 answer
113 views
Qemu: SEV: Failed to query the attestation report length ret=-22 fw_err=0 ()
I try to attest my vm running on a kvm+qemu host using qmp and this command: echo '{ "execute": "qmp_capabilities" }\n{"execute":"query-sev-attestation-report",&...
- 11
4 votes
1 answer
1k views
Practicality of outsourcing password hashing using enclaves
I've been pondering some potential cybersecurity applications for enclaves. One of them being the problem of password hashing. Some clients have enclave support, meaning part of their CPU can securely ...
- 290
1 vote
1 answer
347 views
What's the feasibility of making a hostile TPM chip?
Among the things listed that a TPM chip can do I found something not like the others: Remote Attestation: ... This allows a third party to verify that the software has not been changed. But in a ...
- 1,300
1 vote
0 answers
171 views
Is anonymous remote attestation viable?
I'm currently reading about the TPM and remote attestation. Here's my current understanding of what is happening. To attest a PCR value to a remote party, the TPM signs the value with an attestation ...
- 11
1 vote
0 answers
318 views
How can I create restricted signing key or attestation key and certify it in TPM 2.0?
I need to create an attestation key (AK) and use it to sign arbitrary data in TPM 2.0. The TCG Guidance documents, suggest that some TPMs may come pre-provisioned with an AK that is part of the ...
- 11
2 votes
0 answers
252 views
Perform quote operation over NV-memory in TPM
It is known that is possible to define an NV Extend Index which has a behaviour similar to a PCR (Platform Configuration Register) and it is possible to modify it using TPM2_NV_Extend() operation. ...
- 21
1 vote
1 answer
725 views
TPM with the three main groups of functions
I’m a little unclear on this (marked strong): "The public key authentication functions provide for on-chip key pair generation using a hardware random number generator, along with public key ...
user180095
2 votes
1 answer
1k views
Intel SGX - Remote attestation
I am currently reading up on Intel's SGX, especially the remote attestation part. I am having a questions regarding this topic. Let us consider the following protocol: Enclave A and B do remote ...
- 141
3 votes
1 answer
2k views
Using the TPM module to measure boot process and remote attestation
I have a question about Remote Attestation and measured boot with a TPM-Module. The illustration shows my project schematically. A TPM module will be used to measure the boot process and validate ...
- 31