Full Trust Alchemist: Reforging Attestation for Cloud-based Confidential Workloads

International Middleware Conference, pp. 369–382

Abstract

Although confidential virtual machines (CVMs) offer strong isolation in untrusted cloud environments, their attestation mechanisms are restricted to static boot-time measurements. This means they cannot capture the detailed post-boot state necessary for real-world deployments. Modern workloads demand context-specific trust decisions that vary across verifiers, operational stages and workloads, like software supply chains or cloud-native workload deployments.

Authors 0

1. Author list not loaded yet.