91% of 115 Real TEE Deployments Are Not Reproducible, Which Breaks the Point of Remote Attestation

arXiv 2609.11411·medium signalXBlueskyLinkedInCopy link

Remote attestation only means something if a verifier can trace the reported measurement back to source, which requires reproducible builds. A technical analysis of 115 TEE deployments across Intel SGX, Intel TDX and AMD SEV found 91% were not reproducible, and 80% failed to provide both source code and a reference build, the two prerequisites. The authors contacted maintainers of 50 SGX projects and interviewed 12 developers from industry and academia; exactly one said reproducibility is a development priority, confirming the measurement from the other direction.