Hardware-secured remote attestation is essential to establishing trust in the integrity of confidential virtual machines (cVMs), but is difficult to use in practice because verifying attestation evidence requires the use of hardware-specific cryptographic logic. This increases both maintenance costs and the verifiers' trusted computing base. We introduce the concept of self-verifying remote attestation evidence. Each attestation bundle includes verification logic as a WebAssembly component signed by a trusted party. This approach transforms evidence verification into a standard code-signing problem: the verifier checks the signature on the embedded logic and then executes it to validate the evidence. As a result, verifiers can validate attestation evidence without any platform-specific knowledge. We implement this concept as TrustMee, a platform-agnostic verification driver for the Trustee framework. We demonstrate its functionality with self-verifying evidence for AMD SEV-SNP and Intel TDX attestations, producing attestation claims in the standard EAT Attestation Result (EAR) format.

翻译：硬件保障的远程证明对于建立对机密虚拟机（cVM）完整性的信任至关重要，但在实践中难以应用，因为验证证明证据需要使用硬件特定的密码学逻辑。这既增加了维护成本，也扩大了验证方的可信计算基。我们提出了可自验证的远程证明证据的概念。每个证明数据包都包含由可信方签名的WebAssembly组件形式的验证逻辑。该方法将证据验证转化为一个标准的代码签名问题：验证方检查内嵌逻辑的签名，然后执行该逻辑以验证证据。因此，验证方无需任何平台特定知识即可验证证明证据。我们将此概念实现为TrustMee——一个适用于Trustee框架的与平台无关的验证驱动程序。我们通过为AMD SEV-SNP和Intel TDX证明生成符合标准EAT证明结果（EAR）格式的自验证证据，展示了其功能。