DMA: Mutual Attestation Framework for Distributed Enclaves
摘要
Remote attestation is a key mechanism for establishing trust between multiple enclaves that require interaction. Existing approaches establish trust by integrating remote attestation and TLS handshakes with the help of a centralised attestation service. However, such an approach lacks freshness and struggles to overcome advanced network attacks. In addition, over-centralised trust determination cannot satisfy scenarios requiring frequent attestations, even leading to incorrect trust decisions. For this reason, we propose DMA, which provides strong freshness binding of the attestation evidence and uses consensus algorithms to ensure balanced trust across network domains. We implement a prototype to demonstrate the scalability and efficiency resulting from the decentralised design of DMA.