# Integrating Remote Attestation with Transport Layer Security

arXiv: https://arxiv.org/abs/1801.05863 · HTML: https://mlsanity.com/paper/1801.05863/

## Key facts

- Cited by 9 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 17 Jan 2018.

## Built on by (most cited first, 9 of 9)

- [PPFL: Privacy-preserving Federated Learning with Trusted Execution Environments](https://mlsanity.com/paper/2104.14380/) (2021)
- [Federated Learning Enables Big Data for Rare Cancer Boundary Detection](https://mlsanity.com/paper/2204.10836/) (2022)
- [HETAL: Efficient Privacy-preserving Transfer Learning with Homomorphic Encryption](https://mlsanity.com/paper/2403.14111/) (2024)
- [Perun: Secure Multi-Stakeholder Machine Learning Framework with GPU Support](https://mlsanity.com/paper/2103.16898/) (2021)
- [Scalable and Privacy-Preserving Synthetic Data Generation on Decentralised Web](https://mlsanity.com/paper/2310.20062/) (2023)
- [The Proxy Knows Too Much: Sealing LLM API Routers with Attested TEEs](https://mlsanity.com/paper/2606.16358/) (2026)
- [Horizontal Federated Learning and Secure Distributed Training for Recommendation System with Intel SGX](https://mlsanity.com/paper/2207.05079/) (2022)
- [A Generative Framework for Low-Cost Result Validation of Machine Learning-as-a-Service Inference](https://mlsanity.com/paper/2304.00083/) (2023)
- [SoK: Decentralized Agent Economic Infrastructure](https://mlsanity.com/paper/2610.01756/) (2026)

## Abstract (arXiv)

Intel(R) Software Guard Extensions (Intel(R) SGX) is a promising technology to securely process information in otherwise untrusted environments. An important aspect of Intel SGX is the ability to perform remote attestation to assess the endpoint's trustworthiness. Ultimately, remote attestation will result in an attested secure channel to provision secrets to the enclave. We seamlessly combine Intel SGX remote attestation with the establishment of a standard Transport Layer Security (TLS) connection. Remote attestation is performed during the connection setup. To achieve this, we neither change the TLS protocol, nor do we modify existing protocol implementations. We have prototype implementations for three widely used open-source TLS libraries: OpenSSL, wolfSSL and mbedTLS. We describe the requirements, design and implementation details to seamlessly bind attested TLS endpoints to Intel SGX enclaves.