Attestation
Attestation is a cryptographic procedure by which a device or piece of software proves that it is trustworthy and has not been tampered with. The recipient of this proof does not need to personally trust the device – instead, they verify a machine-readable certificate.
Attestation literally means “certification” – and that captures it well. A device or a program issues a cryptographic proof, a so-called proof with a mathematical basis, that cannot be forged. This proof states: “I am what I claim to be, and no one has altered me.” Another system – for example, a server on the internet – can verify this proof without having to blindly trust the device. Attestation replaces personal trust with verifiable technology. The procedure is issued by special security chips that are permanently built into hardware and cannot be manipulated themselves.
Why attestation is the foundation of secure systems
Without attestation, a server has no way to check whether a device connecting to it is truly intact. An attacker could boot a manipulated operating system and still pretend everything is normal. With attestation, this changes fundamentally: the server receives a cryptographic statement about which software is running on the device – before it discloses sensitive data.
This is especially critical in areas where data is particularly sensitive: bank accounts, health data, corporate secrets. A stolen device on which someone has installed a manipulated system fails the attestation – and therefore gets no access. Attestation is thus less a single function than a foundation on which many security architectures are built.
How the proof is created and verified
At its core, attestation works with a security chip found in nearly every modern laptop and smartphone. On PCs it’s called a TPM (Trusted Platform Module); on iPhones, the equivalent is called the Secure Enclave. When the device boots up, this chip generates a kind of fingerprint: it measures which software was started in which order and stores this measurement in tamper-protected registers.
When a server now requests an attestation, the chip sends a digitally signed summary of these measurements. A digital signature works like a seal: it can only be generated with the chip’s secret key, but can be verified by anyone using the public key. The server compares the reported measurements with known, good states. If they deviate – because, for example, malware has interfered with the boot process – the attestation fails.
Important: the chip does not grant a general free pass. It only certifies the state at the time of measurement. If someone changes the system afterward, this will be noticed at the next attestation.
Attestation in products and current debates
Attestation shows up in many places, often without the term ever being mentioned. Windows uses it via the TPM to ensure that only unmanipulated systems can unlock certain features – that’s why Windows 11 requires a TPM chip. Apple uses attestation on every iPhone to secure App Store payments and verify developers.
Attestation is also becoming increasingly relevant in the field of AI infrastructure. Anyone who has sensitive data processed in a data center wants to know whether the AI application there really runs as specified – and hasn’t been secretly altered. Technologies such as confidential computing, i.e. confidential processing in shielded areas of the processor, use attestation to guarantee exactly that.
Politically, the topic is controversial. Proponents say attestation protects users from malware and device fraud. Critics warn that the same technology gives manufacturers the power to control which software is allowed to run on a device at all – thereby restricting repairability and free choice of software.