Clarifying CPU Vendor’s Responsibilities for Remote Attestation with Intel SGX
Intel Software Guard eXtensions (SGX) allows users to confirm the confidentiality and integrity of running programs on cloud platforms by remote attestation. SGX has recently adopted the new remote attestation, ECDSA Attestation, and will abolish the previous one, EPID Attestation. ECDSA Attestation enables third parties to build their own verification environment. However, its high degree of freedom obscures the boundary of responsibility between the CPU vendor and third parties regarding ECDSA Attestation.
Authors
- Tadanori Teruya (ORCID: https://orcid.org/0000-0003-4362-4887)
- Kazuma Ohara (ORCID: https://orcid.org/0000-0003-0213-3942)
- Kuniyasu Suzaki (ORCID: https://orcid.org/0000-0003-0912-0087)
- Hirotake Abe (ORCID: https://orcid.org/0000-0003-3496-8186)
- Takashi Yagawa
Institutions
- University of Tsukuba (JP)
- Institute of Information Security (JP)
- National Institute of Advanced Industrial Science and Technology (JP)
Publication Details
- Journal
- IEICE Transactions on Fundamentals of Electronics Communications and Computer Sciences
- Published
- 2025-09-29
- DOI
- https://doi.org/10.1587/transfun.2025cip0027
- Primary Topic
- Security and Verification in Computing
- Type
- article
- Field-Weighted Citation Impact
- 0.00
Funders
- Core Research for Evolutional Science and Technology
- Precursory Research for Embryonic Science and Technology