Flexible remote attestation of pre-SNP SEV VMs using SGX enclaves. (arXiv:2305.09351v1 [cs.CR])

We propose a protocol that explores a synergy between two TEE
implementations: it brings SGX-like remote attestation to SEV VMs. We use the
notion of a \emph{trusted guest owner}, implemented as an SGX enclave, to
deploy, attest, and provision a SEV VM. This machine can, in turn, rely on the
trusted owner to generate SGX-like attestation proofs on its behalf. Our
protocol combines the application portability of SEV with the flexible remote
attestation of SGX. We formalise our protocol and …

attestation enclave machine protocol sgx turn vms