TEE Radar

An arXiv paper proposes Portable Remote Attestation TLS (PRA-TLS), where an Attester Daemon measures the host environment and application code at runtime for a remote Verifier. The authors checked its security with the Tamarin Prover and built an Intel SGX prototype; it addresses tampering at the boundary between an attested enclave and its untrusted application.

DDRop is a hardware attack that uses an interposer to drop memory write commands, so Intel TDX and AMD SEV-SNP VMs process stale but validly encrypted data. It needs brief physical access and about $200 in hardware, and exploits the lack of memory freshness guarantees; a blog post says vendors treat it as out of scope, and the post is a secondary write-up that names no original researchers or date.

An IETF SEAT draft dated 2 October 2026 gives technical details of CVE-2026-92701 and CVE-2026-92702 (both CVSS 9.1) and CVE-2026-33697 (CVSS 7.5), plus several GitHub advisories, as evidence that early attestation fails even without physical access. The authors say all but two early-attestation implementations have been archived, withdrawn or moved to post-handshake attestation, which matters for remote attestation design in TEEs.