A Challenge-Nonce Freshness Gap in Project Veraison's TPM Reference Schemes, Found by Appraising Application-Layer Action Evidence End-to-End arxiv.org
Paper finds Veraison’s TPM attestation reference scheme accepts replayed quotes if nonce freshness isn’t enforced, then fixes it.