Attestation is a fundamental building block to establish trust over software systems. When used in conjunction with trusted execution environments, it guarantees that genuine code is executed even when facing strong attackers, paving the way for adoption in several sensitive application domains. This paper reviews existing remote attestation principles and compares the functionalities of current trusted execution environments as Intel SGX, Arm TrustZone and AMD SEV, as well as emerging RISC-V solutions.
翻译:验证是建立对软件系统信任的基本基石,当与可信赖的执行环境一起使用时,它保证即使面对强攻者也执行真正的代码,为在若干敏感应用领域采用该代码铺平道路。本文回顾了现有的远程证明原则,并比较了目前可信赖的执行环境的功能,如英特尔SGX、Arm TrustZone和AMD SEV,以及新出现的RISC-V解决方案。