Trusted Execution Environments (TEEs) are increasingly integral to modern security, providing a protected space for cryptographic key storage and sensitive code execution. These environments enable critical functions such as secure boot, encryption services, and secure storage, typically accessible through a narrow, well-defined interface for use by operating systems and applications.

As reliance on TEEs grows, so does the demand for evidence that these security-sensitive operations are genuinely being conducted within a TEE. This evidence can pertain to the secure element platform itself, or to the storage and protection properties of the cryptographic keys, or both. This is generally
referred to as remote attestation.

Standardization efforts by organizations like the IETF and TCG are making remote attestation more accessible to developers. However, these solutions have largely been designed with high-end devices in mind, leading to an important question: Are they also applicable to embedded devices, especially those operating with real-time operating systems like RIOT OS?

In this talk, Hannes will explore the latest developments in remote attestation and discuss the unique challenges and potential benefits for embedded systems.