MATEE: Multimodal Attestation for Trusted Execution Environments

Galanou A, Gregor F, Kapitza R, Fetzer C (2022)


Publication Type: Conference contribution

Publication year: 2022

Publisher: Association for Computing Machinery

Series: Middleware '22

City/Town: New York, NY, USA

Pages Range: 121–134

Conference Proceedings Title: Proceedings of the 23rd Conference on 23rd ACM/IFIP International Middleware Conference

Event location: Quebec, QC, Canada

ISBN: 9781450393409

DOI: 10.1145/3528535.3565239

Abstract

Confidential computing services enable users to run their workloads in Trusted Execution Environments (TEEs) leveraging secure hardware like Intel SGX, and verify them by performing remote attestation. This process offers necessary proof for the integrity of users' software and the authenticity of the hardware, signed by a hardware-specific attestation key. Recent side-channel attacks have successfully retrieved such keys, enabling attackers to forge the attestation data and thereby undermining users' trust in their TEE. If the attestation proof is bound to a second hardware root of trust impervious to side-channel attacks, then the remote attestation process can maintain its security guarantees.In this paper, we introduce MATEE, a novel remote attestation mechanism for TEEs that creates a second chain of trust to a Trusted Platform Module (TPM), adding diverse redundancy into the existing attestation process. Targeting SGX enclaves for our prototype, as the most prominent TEE implementation to date, we describe how MATEE satisfies the necessary security requirements as well as present several scenarios that demonstrate its applicability and its benefits to the confidential computing landscape.

Authors with CRIS profile

Involved external institutions

How to cite

APA:

Galanou, A., Gregor, F., Kapitza, R., & Fetzer, C. (2022). MATEE: Multimodal Attestation for Trusted Execution Environments. In Proceedings of the 23rd Conference on 23rd ACM/IFIP International Middleware Conference (pp. 121–134). Quebec, QC, Canada: New York, NY, USA: Association for Computing Machinery.

MLA:

Galanou, Anna, et al. "MATEE: Multimodal Attestation for Trusted Execution Environments." Proceedings of the 23rd ACM/IFIP International Middleware Conference, Quebec, QC, Canada New York, NY, USA: Association for Computing Machinery, 2022. 121–134.

BibTeX: Download