TokenWeaver: Privacy Preserving and Post-Compromise Secure Attestation

ePrint Report: TokenWeaver: Privacy Preserving and Post-Compromise Secure Attestation

Cas Cremers, Charlie Jacomme, Eyal Ronen

Modern attestation based on Trusted Execution Environments (TEEs) can significantly reduce the risk of secret compromise by attackers, while allowing users to authenticate across various services. However, this has also made TEEs a high-value attack target, driving an arms race between novel compromise attacks and continuous TEEs updates.
Ideally, we would like to ensure that we achieve Post-Compromise Security (PCS): even after a compromise, we …

compromise eprint report privacy privacy preserving