microsoft/TEE-Attestation-Verification

microsoft/TEE-Attestation-Verification

Description: A portable, memory-safe library for verification of hardware attestations from confidential hardware such as AMD’s SEV-SNP.

Language: Rust

License: MIT

Stars: 12

Forks: 4

Open issues: 23

Created: 2026-02-03T14:02:05Z

Pushed: 2026-09-23T13:14:01Z

Default branch: main

Fork: no

Archived: no

README:

TEE Attestation Verification

Portable Rust libraries and demos for verifying trusted execution environment attestations.

The workspace currently focuses on AMD SEV-SNP attestation reports: parsing the report, verifying AMD certificate collateral, verifying the report signature, and returning authenticated report claims to callers.

Workspace layout

| Path | Package | Purpose | |---|---|---| | cbor/ | tee-attestation-verification-cbor | CBOR values over deterministic and non-deterministic EverCBOR. | | crypto/ | tee-attestation-verification-crypto | Backend abstraction for certificate handling, certificate-chain verification, and signature verification. | | cose/ | tee-attestation-verification-cose | COSE_Sign1 verification helpers. | | caci/ | tee-attestation-verification-caci | CACI UVM endorsement verification against SEV-SNP attestations and DID x509 roots of trust. | | attestation/ | tee-attestation-verification-lib | Public attestation verification APIs, SEV-SNP report types, and KDS support. | | ffi/ | tee-attestation-verification-ffi | Native C ABI, WebAssembly bindings, and a Linux x64 .NET binding and NuGet package for the Rust domain crates. | | demos/web-verify-kernel/ | n/a | Browser demo verifying an SNP attestation using the WASM bindings. | | demos/caci-attestation-verify/ | n/a | Browser demo verifying an SNP CACI attestation using the WASM bindings. |

Read the crate-specific docs for API details:

• [attestation/README.md](attestation/README.md)
• [caci/README.md](caci/README.md)
• [cose/README.md](cose/README.md)
• [crypto/README.md](crypto/README.md)
• [ffi/README.md](ffi/README.md)

Component dependencies

Arrows point from each dependency to the workspace crates that directly depend on it.

flowchart LR
attestation["attestation (SNP)"]
caci[caci]
cbor[cbor]
cose[cose]
crypto[crypto]
ffi[ffi]

crypto --> attestation
attestation --> caci
cose --> caci
crypto --> caci
cbor --> cose
crypto --> cose
attestation --> ffi
caci --> ffi
cose --> ffi
crypto --> ffi

Crypto backend selection

The default feature set enables every backend selector. The build selects the target-compatible backend:

| Feature | Platforms | sync | async | Notes | |---|---|---:|---:|---| | crypto_openssl | Native non-Windows | yes | yes | Native OpenSSL-backed verification. | | crypto_webcrypto | WASM | no | yes | Browser/Node WebCrypto-backed verification. | | crypto_windows | Windows | yes | yes | Windows CNG and Crypt32-backed verification. |

Use explicit backend features with --no-default-features for backend-specific testing.

Quick start

[dependencies]
tee-attestation-verification-lib = { git = "https://github.com/microsoft/TEE-Attestation-Verification", tag = "tav-X.X.X" }

use tee_attestation_verification_lib::snp::verify::{sync as tav, ChainVerification};
use tee_attestation_verification_lib::{certificate_from_pem, AttestationReport};
use zerocopy::FromBytes;

let report = AttestationReport::read_from_bytes(attestation_report_bytes)?;
let vcek = certificate_from_pem(vcek_pem)?;
let ask = certificate_from_pem(ask_pem)?;

tav::verify_attestation(&report, &vcek, &ChainVerification::WithPinnedArk { ask: &ask })?;

Trademarks

This project may contain trademarks or logos for projects, products, or services. Authorized use of Microsoft trademarks or logos is subject to and must follow Microsoft's Trademark & Brand Guidelines. Use of Microsoft trademarks or logos in modified versions of this project must not cause confusion or imply Microsoft sponsorship. Any use of third-party trademarks or logos are subject to those third-party's policies.