Signing Arbitrary Quotes for Remote Attestation

We have used CacheOut and SGAxe to recover private attestation keys from a fully updated SGX machine which is considered by Intel to be in a trusted status. With these private attestation keys in hands, we can sign arbitrary SGX attestation quotes which are then considered legitimate by Intel’s attestation service (or at least until they revoke our key). In this video, we sign our own quote and then verify it against Intel’s Attestation Service.