Taming Attestation for the Cloud Native World with Parsec
summary
Parsec presents a language‑neutral microservice that replaces brittle PKCS#11 shims to provision keys and now emit attestation evidence across TPM and PSA/EAT backends using RATS-style encapsulation; that evidence is consumable by the Veraison verification components. An IETF attested TLS extension makes attestation a handshake prerequisite (POC work on GitHub), and a proposed Spire plugin pair would use Parsec for evidence gathering and Veraison for verification to enable hardware-backed node attestation.
AI-written summary · about
chapters (11)
- 0:00Intro
- 1:55This Session
- 3:55The Cloud-Native Edge
- 6:18Cloud-Native Edge Security
- 8:37Parsec Simplifies Hardware Security
- 11:49Use Case: Onboarding
- 14:10The Private Key is Not Enough
- 16:06Endorse, Attest, Verify
- 19:06Platform-Agnostic Evidence and Verification
- 22:57Attested TLS
- 25:43SPIRE Node Attestation
related talks
21mParsec: A New Platform Abstraction for Security
24mHardware backed attestation in TLS
10mParsec
14mUsing DevIDs and TPMs for Node Attestation
24mPARSEC: A New Platform Abstraction for Security
13mHardware Backed Security For Multitenancy at the Edge with SPIFFE & PAR...
29mA Simple Protocol for Remote Attestation of System Integrity
25mDemystifying remote attestation