Skip to main content
FOSDEM PWA

Lesson from Cloud Confidential Computing Remote Attestation Sample

UD6.215 | Day 2 | 11:15 - 11:35 | Speakers: Kuniyasu Suzaki

Lesson from Cloud Confidential Computing Remote Attestation Sample
A picture of a devroom at FOSDEM 2024
Open in browser

Notes

Abstract

We have released the sample codes for remote attestation on cloud confidential computing services. I report the lessons learned from them. https://github.com/iisec-suzaki/cloud-ra-sample The samples cover multiple types of Trusted Execution Environments (TEEs): (1) Confidential VMs, including AMD SEV-SNP on Azure, AWS, and GCP, and Intel TDX on Azure and GCP; (2) TEE enclaves using Intel SGX on Azure; and (3) hypervisor-based enclaves using AWS Nitro Enclaves. As verifiers, the samples make use of both open-source attestation tools and commercial services such as Microsoft Azure Attestation (MAA). This talk aims to share these observations to support developers and researchers working with heterogeneous TEE environments and to help avoid common pitfalls when implementing remote attestation on cloud platforms.

Speakers

Kuniyasu Suzaki

Professor of Institute of Information Security (IISEC, graduate school). He received the B.E. and M.E. degrees in computer science from the Tokyo University of Agriculture and Technology and the Ph.D. in computer science from The University of Tokyo. His current research interests are confidential computing based on TEE and trusted computing based on TPM.

Notice: The placeholder video image is licensed under CC BY-SA 4.0. The original image can be found hereChanges made to the image are: Cropped the image to a new ratio, part of the image was cut off.