DET-G4: Attestation result replayed¶
A capture's attestation receipt reuses the nonce or raw-result digest of an earlier capture: an old passing result was presented again instead of attesting afresh.
| Property | Value |
|---|---|
| Severity | critical |
| Platform | NVIDIA GPU CC |
| Group | tee |
| Log source | GPU evidence capture · nvattest receipt |
| Policy | P-04 |
| Related check | GPUCC-SIGVERIFY-01: The attestation report signature is cryptographically verified |
Fires when¶
attestation nonce reused / not fresh (replayed attestation result)
How it runs¶
untrust detect --platform gpu-cc compares successive GPU evidence captures, each passed with --capture.
A match is a detection event with this rule's ID. Upload it to the console to alert on it; see Runtime detections.