Remote attestation - 0xkey

Remote attestation lets a remote verifier cryptographically check that an enclave is a genuine AWS Nitro TEE and that its platform measurements (PCRs) and related fields are intact.

What you can verify

Surface	API	Client helper	Proves
Attestation document	`get_attestation`	`verifyAttestationDocument` (`@0xkey-io/crypto`)	Nitro COSE Sign1 + cert chain to AWS Root CA; readable PCRs / `user_data` / ephemeral key
Boot proof	`get_latest_boot_proof`	`verifyBootProof` / `verifyLatestBootProof`	Attestation plus quorum manifest / approvals (pivot binding)
App proof	`get_app_proofs`	`verify` / app-proof helpers	Per-activity enclave attestation of app data

For “is this real Nitro hardware?” use attestation document.
For “is it running the pivot we approved?” use boot proof.

How `get_attestation` works

Coordinator serves a raw AWS Nitro attestation document (COSE Sign1):

Short in-process cache (60s) per enclave app
Fresh NSM fetch via qos_host (live)
On live success: upsert the matching boot proof (keeps boot-proof queries consistent)
On live failure: latest stored awsAttestationDocB64
Never returns an empty success — typed errors instead

Accepted enclaveType values (case-insensitive): signer, notarizer, tls-fetcher / fetcher, evm-parser / transaction-parser / parser, ump / policy-engine / policy (Turnkey ump maps to 0xkey policy-engine). See the full request/response contract on Get attestation document.

Example

import { ZeroXKey } from "@0xkey-io/sdk-server";
import { verifyAttestationDocument } from "@0xkey-io/crypto";

const client = new ZeroXKey({
  apiBaseUrl: "https://api.staging.0xkey.io",
  apiPublicKey: process.env.API_PUBLIC_KEY,
  apiPrivateKey: process.env.API_PRIVATE_KEY,
  defaultOrganizationId: process.env.ORGANIZATION_ID,
});

const { attestationDocument } = await client.getAttestationDocument({
  organizationId: process.env.ORGANIZATION_ID,
  enclaveType: "signer",
});

const bytes = Uint8Array.from(
  Buffer.from(attestationDocument, "base64"),
);
await verifyAttestationDocument(bytes);

Trust chain (simplified)

AWS Nitro Root CA
  └── intermediate CA bundle (in attestation)
        └── enclave leaf cert
              └── COSE_Sign1 over attestation payload
                    ├── PCRs (image / kernel / …)
                    ├── user_data (QOS manifest digest)
                    └── public_key (ephemeral key for share posting)

API: Get attestation document
Roadmap status: Roadmap (attestation + boot/app proofs marked Supported)