Demystifying Attestation in Intel Trust Domain Extensions via Formal Verification
نویسندگان
چکیده
In August 2020, Intel asked the research community for feedback on newly offered architecture extensions, called Trust Domain Extensions (TDX), which give more control to Domains (TDs) over processor resources. One of key features these extensions is remote attestation mechanism, provides a unified report verification mechanism TDX and its predecessor Software Guard (SGX). Based our experience intuition, we respond request by formally specifying in using ProVerif's specification language. Although technology seems very promising, process formal reveals number subtle discrepancies Intel's specifications that could potentially lead design implementation flaws. After resolving discrepancies, also present fully automated proofs TD preserves confidentiality secret authentication considering state-of-the-art Dolev-Yao adversary symbolic model ProVerif. We have submitted draft Intel, making changes.
منابع مشابه
Demystifying Intel Branch Predictors
Improvement of branch predictors has been one of the focal points of computer architecture research during the last decade, ranging from two-level predictors to complex hybrid mechanisms. Most research efforts try to use real, already implemented, branch predictor sizes and organizations for comparison and evaluation. Yet, little is known about exact predictor implementation in Intel processors...
متن کاملFormal Verification of Embedded Systems for Remote Attestation
Embedded systems are increasingly pervasive, interdependent and in many cases critical to our every day life and safety. As such devices are more and more subject to attacks, new protection mechanisms are needed to provide the required resilience and dependency at low cost. Remote attestation (RA) is a software-hardware mechanism that securely checks the internal state of remote embedded device...
متن کاملFifteen Years of Formal Property Verification in Intel
Model checking technologies have been applied to hardware verification in the last 15 years. Pioneering work has been conducted in Intel since 1990 using model checking technologies to build industrial hardware verification systems. This paper reviews the evolution and the success of these systems in Intel and in particular it summarizes the many challenges and learning that have resulted from ...
متن کاملAttestation: Evidence and Trust
Attestation is the activity of making a claim about properties of a target by supplying evidence to an appraiser. An open-ended framework for attestation is desirable for safe support to sensitive or high-value activities on heterogeneous networks. We identify five central principles to guide development of attestation systems. We argue that (i) attestation must be able to deliver temporally fr...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
ژورنال
عنوان ژورنال: IEEE Access
سال: 2021
ISSN: ['2169-3536']
DOI: https://doi.org/10.1109/access.2021.3087421