Preprint
Sep 2026
Session Attestation for Unmodified TLS Services in Confidential Virtual Machines
Confidential cloud services aim to protect sensitive requests from the infrastructure that executes them. However, running a service inside a trusted execution environment does not ensure that users'plaintext appears only within the protected environment. We formulate Endpoint-Substitution Relay (ESR), a common attack...
Qi Gu, Wen-Mao Liu, Wei-Jing You et al.
· 0 citations