Confidential Computing Attestation vs TLS Certificate Trust Models
Attestation proves what code is running; TLS only proves who you're talking to.
Anouk Mercer
Section
Attestation and Verifiable Computing
8 stories in Attestation and Verifiable Computing.
RATS Architecture and Attestation Evidence Formats
RFC 9334 defines how remote systems prove their actual runtime state, not just their identity.
Preston Nardone
Verifiable Transparency Logs for Model Provenance
Cryptographic logs make it impossible to hide who trained a model or when it changed.
Lorena Sundqvist
ARM TrustZone vs Intel SGX for Attestation Workflows
SGX bakes attestation into silicon while TrustZone leaves it to implementers to build.
Preston Nardone
Attestation Token Replay and Freshness Attacks
Attackers replay valid tokens to bypass security checks that depend on current device state.
Lorena Sundqvist
Measured Boot and Platform Integrity for AI Servers
Measured Boot creates a tamper-proof record of everything that runs before your OS loads.
Preston Nardone
in-toto Attestation for AI Supply Chains
Cryptographically binding AI models to their provenance without reinventing supply chain security.
Kian Vance
Remote Attestation Protocols in Confidential Computing
Understanding the three-participant model unlocks how attestation actually works.
Preston Nardone