DocumentationTutorials

Methods

Understand about the various types of attestation methods along some examples.

Note: Currently, there is no industry standard for remote attestation protocols. As a result, CPU vendors and Cloud Service Providers have each developed their own proprietary solutions.

Overview

The right attestation method depends entirely on what you need to prove. This section breaks down the most common approaches, helping you select the best one for your specific security goals and use cases.

Method
Scope of Verification
Description

Raw Attestation

Initial Firmware/CPU State

A low-level measurement from the CPU vendor's hardware.

Secure Boot

Boot Chain

Verifies the bootloader and kernel against known measurements.

Virtual TPM (vTPM)

Runtime Environment

Measures applications, libraries, and configuration after the OS has booted.

Paravirtualized TPM

Runtime Environment

An interoperable alternative to a vTPM that uses standard drivers.

As of today, there exists no standard for attestation. Every CSP implements its own variant of remote attestation, leveraging different security processor technologies. Some example reports can be found in the table below.

```json
{"Version":1,
"Source":"AWS",
"Protocol":"sev-snp",
"Instance":"test-instance",
"Attestation":
{
"Version":1,
"Product":"Milan",
"Report":"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",
"Data":"eyJOb25jZSI6ImRHVnpkQzF1YjI1alpRbz0iLCJDb25maWciOnt9fQ=="}
}
```

Last updated

Was this helpful?