Shrinking The Elephant - A Confidential Computing Attestation Sequel
summary
Confidential Containers ships a working open source attestation framework: the Attestation Service plus the Key Broker Service (KBS), both HTTP/HTTPS based, issuing JWT attestation tokens and accepting attestation evidence from TDX, SGX, SEV/CCA, RISC‑V, Azure vTPM and other vendor formats via a pluggable verifier. It supports external verifiers (Intel Amber), offers a single configfs ABI entry point for requesting evidence, and prototypes combined device attestation via a trusted device manager and SPDM. Remaining gaps are converging result formats and sourcing trusted supply‑chain reference values.
AI-written summary · about
chapters (5)
- 0:00Introduction to attestation
- 8:15Attestation Service project
- 13:34Reference values and supply chain
- 16:44Device attestation proposal
- 23:18Q&A and summary
related talks
24mThe elephants in the confidential room: Attestation and verification
40mDon’t Trust Opaque Clouds, Cryptographically Verify Instead!
28mSealed for All: Multi-Party Confidential Computing, No Trust
37mIt's All About Trust: Why Confidential Computing Matters
27mTrust No One: Bringing Confidential Computing to Containers
42mSponsored Session: Confidential Computing - New Capabilities for New Workloads
19mKeynote: Attested, Transparent, Sovereign: The Evolution of Confidential Computing- 37mIt's All About Trust: Why Confidential Computing Matters