Binding TDISP and Platform Attestation Reports for Confidential VMs

Explore the critical security challenges and solutions in confidential computing through this 42-minute conference talk from the Linux Foundation. Delve into the TEE Device Interface Security Protocol (TDISP), an industry standard that establishes trust between Confidential Virtual Machines (CVMs) and devices through attestation, secures host-device interconnects, and manages secure device interface attachment and detachment. Learn how TDISP devices enhance CVM performance while maintaining confidentiality and integrity guarantees, making confidential computing more cost-effective and accessible. Examine the current security vulnerability where attackers can replay old TDISP attestation reports with CVMs lacking the corresponding device, potentially causing relying parties to inappropriately disclose secrets. Discover a comprehensive analysis of this binding problem between TDISP and platform attestation reports, understand the intended use cases, and explore a proposed solution utilizing TPM NVIndex to ensure both attestation reports originate from the same CVM, thereby strengthening the overall security posture of confidential computing environments.