remote-attestation

Hardware-based attestation and intrusion detection app for Android. It provides both local verification with another Android device via QR codes and optional scheduled server-based verification with support for alert emails. It uses hardware-backed keys and attestation support as the foundation and chains trust to the app for software checks.

Report and track banking app compatibility with GrapheneOS, including which workarounds may be required.

Go packages built on go-tpm providing a high-level API for using TPMs

attestation.app remote attestation server. Server code for use with the Auditor app: https://github.com/GrapheneOS/Auditor. It provides two services: submission of attestation data samples and a remote attestation implementation with email alerts to go along with the local implementation based on QR code scanning in the app.

A small subset of the submitted sample data from https://github.com/GrapheneOS/Auditor. It has a sample attestation certificate chain per device model (ro.product.model) along with a subset of the system properties from the sample as supplementary information.

TPM Remote Attestation protocol using go-tpm and gRPC

Reference code for creating and verifying a GCE firmware signed reference value message.

Remote attestation for Trusted and Confidential Computing platforms (TPM, AMD SEV-SNP, Intel SGX/TDX)

A "real" remote attestation flamework of Intel SGX

Implementation of zRA protocol, a non-interactive method for constructing a transparent remote attestation (RA) protocol based on zkSNARKs.

Verify that any MCP server is running the intended and untampered code via hardware attestation.

On the TOCTOU Problem in Remote Attestation

A Confidential Computing-Aware Certificate Authority

Auditor app prebuilt using the latest official release of the Auditor app.

Simple and clear sample code for Remote Attestation

Accountable Autonomy: open-source evidence layer that gates every AI agent tool call against your policy and writes a hash-chained record an auditor verifies offline, without trusting you. Root-agnostic; binds to TPM 2.0 / SEV-SNP when present. Your environment, no SaaS, no telemetry. AGPL-3.0.

A Kubernetes device plugin that exposes Confidential Computing devices to workloads in Google Kubernetes Engine (GKE) clusters.

immune Guard agent application

This is the code repository for the paper 'Site Attestation: Browser-based Remote Attestation', which was presented at the 18th EuroSec workshop co-located with the EuroSys'25 conference.

Repo contains ready to deploy assets for 'Build multi-party crypto wallets with AWS Nitro Enclave' workshop.