Publication

On Attestation Dilution

2026

Abstract

The trust we place in "trusted execution environments" is based solely on the evidence of the attestation. The attestation provides a proof of genuine hardware and a list of software hashes. In theory, the hashes are sufficient to evaluate the correctness and security properties of the system. In practice, however, hashes map to closed-source firmware that cannot be identified or audited by a user of the system. In this paper we propose a simple new metric, called attestation dilution, to guide system design toward a more open and trustworthy infrastructure. The attestation dilution of a system is the number of hashes in the attestation that cannot be verified by a user. Ultimately, we believe that principled system design can lead to undiluted attestations, meaning that the system can be fully audited for providing the advertised security properties.

Official source

https://infoscience.epfl.ch/entities/publication/2dfd83f6-a93a-4bd5-9d47-3e2fe8315049

About this result

This page is automatically generated and may contain information that is not correct, complete, up-to-date, or relevant to your search query. The same applies to every other page on this website. Please make sure to verify the information with EPFL's official sources.

Graph Chat

Chat with Graph Search

Ask any question about EPFL courses, lectures, exercises, research, news, etc. or try the example questions below.

DISCLAIMER: The Graph Chatbot is not programmed to provide explicit or categorical answers to your questions. Rather, it transforms your questions into API requests that are distributed across the various IT services officially administered by EPFL. Its purpose is solely to collect and recommend relevant references to content that you can explore to help you answer your questions.

2026

Abstract

Official source

https://infoscience.epfl.ch/entities/publication/2dfd83f6-a93a-4bd5-9d47-3e2fe8315049

About this result

Related concepts (32)

Financial audit

A financial audit is conducted to provide an opinion whether "financial statements" (the information is verified to the extent of reasonable assurance granted) are stated in accordance with specified criteria. Normally, the criteria are international accounting standards, although auditors may conduct audits of financial statements prepared using the cash basis or some other basis of accounting appropriate for the organization.

Hash table

In computing, a hash table, also known as hash map, is a data structure that implements an associative array or dictionary. It is an abstract data type that maps keys to values. A hash table uses a hash function to compute an index, also called a hash code, into an array of buckets or slots, from which the desired value can be found. During lookup, the key is hashed and the resulting hash indicates where the corresponding value is stored.

Proof theory

Proof theory is a major branch of mathematical logic and theoretical computer science within which proofs are treated as formal mathematical objects, facilitating their analysis by mathematical techniques. Proofs are typically presented as inductively-defined data structures such as lists, boxed lists, or trees, which are constructed according to the axioms and rules of inference of a given logical system. Consequently, proof theory is syntactic in nature, in contrast to model theory, which is semantic in nature.

Related publications (25)

On Attestation Dilution

Chat with Graph Search

Symplectic cohomology of quasihomogeneous cAn singularities

TÄMU: Emulating Trusted Applications at the (GlobalPlatform)-API Layer

Developing an interactive neuroimaging education resource with Neurodesk