Standardization

There are a few standardization efforts available. Some efforts include, but is not limited to:

• Use of Remote Attestation with Certificate Signing Requests

• X.509-based Attestation Evidence

• WebAuthn Defined Attestation Statement Formats

• ACME Device Attestation Extension

Other suggestions, which hasn’t been seen live in any of the above implementations:

• SKAE extension (Trusted Computing Group)

• Remote ATtestation ProcedureS (rats)

• Entity Attestation Token (EAT)

• Using Attestation in Transport Layer Security

There is also a draft with Use cases for Remote Attestation common encodings. Section 7 describes several of the encodings listed in the table above.

Resources

• A set of key attestations and corresponding X.509 certificate files generated by various Pixel, Surface Pro and YubiKey devices. By Carl Wallace.