Toward a standard device attestation token for device assignment
summary
Proposal defines a portable device-attestation token for device assignment that models SPDM artifacts and legacy PCIe claims using seven CDDL files and accompanying code on GitHub, supports an explicit SPDM claim set (certificates, measurements, VCA), models certificate chains with slot 0 mandatory, and up to 256 measurement slots with optional signatures. An ARM schema already bundles platform, realm and device evidence into a single signed token; specification is in its fourth revision with positive community feedback but freshness and vendor-specific extensions remain open.
AI-written summary · about
chapters (6)
- 0:00Introduction to device attestation
- 4:33Motivation for standard token
- 12:42Device attestation token structure
- 17:17Freshness and SPDM claims
- 23:17Remaining work and future steps
- 31:11Q&A and next steps
related talks
30mDevice Attestation in Hardware TEE based Confidential Computing
25mEstablishing Trusted and Secure Foundation for Device Management Using Open Source Software
42mBinding TDISP & Platform Attestation Reports for Confidential VMs
01h 00mPCI device authentication encryption
39mFormal specification of attestation mechanisms in Confidential Computing
14mUsing DevIDs and TPMs for Node Attestation
24mHardware backed attestation in TLS
29mRemote Attestation of IoT devices using a discrete TPM 2.0