Formally-Verified Security Against Forgery of Remote Attestation Using SSProve

Research output: Contribution to conferencesPaperContributedpeer-review

Contributors

  • Sara Zain - , Barkhausen Institut (Author)
  • Jannik Mähn - , Barkhausen Institut (Author)
  • Stefan Köpsell - , Barkhausen Institut (Author)
  • Sebastian Ertel - , Barkhausen Institut (Author)

Abstract

Remote attestation (RA) is the foundation for trusted execution environments in the cloud and trusted device driver onboarding in operating systems. However, RA misses a rigorous mechanized definition of its security properties in one of the strongest models, i.e., the semantic model. Such a mechanization requires the concept of State-Separating Proofs (SSP). However, SSP was only recently implemented as a foundational framework in the Rocq Prover. Based on this framework, this paper presents the first mechanized formalization of the fundamental security properties of RA. Our Rocq Prover development first defines digital signatures and formally verifies security against forgery in the strong existential attack model. Based on these results, we define RA and reduce the security of RA to the security of digital signatures. Our development provides evidence that the RA protocol is secure against forgery. Additionally, we extend our reasoning to the primitives of RA and reduce their security to the security of the primitives of the digital signatures.

Details

Original languageEnglish
Pages463-484
Number of pages22
Publication statusPublished - 2025
Peer-reviewedYes
Externally publishedYes

Conference

Title30th European Symposium on Research in Computer Security
Abbreviated titleESORICS 2025
Conference number30
Duration22 - 26 September 2025
Website
LocationUniversité de Toulouse
CityToulouse
CountryFrance

External IDs

Scopus 105020691891
ORCID /0000-0002-0466-562X/work/199216544

Keywords