Formally-Verified Security Against Forgery of Remote Attestation Using SSProve

Publikation: Beitrag zu KonferenzenPaperBeigetragenBegutachtung

Beitragende

  • Sara Zain - , Barkhausen Institut gGmbH (Autor:in)
  • Jannik Mähn - , Barkhausen Institut gGmbH (Autor:in)
  • Stefan Köpsell - , Barkhausen Institut gGmbH (Autor:in)
  • Sebastian Ertel - , Barkhausen Institut gGmbH (Autor:in)

Abstract

Remote attestation (RA) is the foundation for trusted execution environments in the cloud and trusted device driver onboarding in operating systems. However, RA misses a rigorous mechanized definition of its security properties in one of the strongest models, i.e., the semantic model. Such a mechanization requires the concept of State-Separating Proofs (SSP). However, SSP was only recently implemented as a foundational framework in the Rocq Prover. Based on this framework, this paper presents the first mechanized formalization of the fundamental security properties of RA. Our Rocq Prover development first defines digital signatures and formally verifies security against forgery in the strong existential attack model. Based on these results, we define RA and reduce the security of RA to the security of digital signatures. Our development provides evidence that the RA protocol is secure against forgery. Additionally, we extend our reasoning to the primitives of RA and reduce their security to the security of the primitives of the digital signatures.

Details

OriginalspracheEnglisch
Seiten463-484
Seitenumfang22
PublikationsstatusVeröffentlicht - 2025
Peer-Review-StatusJa
Extern publiziertJa

Konferenz

Titel30th European Symposium on Research in Computer Security
KurztitelESORICS 2025
Veranstaltungsnummer30
Dauer22 - 26 September 2025
Webseite
OrtUniversité de Toulouse
StadtToulouse
LandFrankreich

Externe IDs

Scopus 105020691891
ORCID /0000-0002-0466-562X/work/199216544

Schlagworte