Skip to content

MEDIUM: SNP report measurement field not compared with expected value — measurement tampering undetected (HW-002) #172

Closed

Description

@imran-siddique

In _hw_providers.py, get_attestation_report() extracts the measurement field from the SNP report but does not compare it against an expected measurement hash. An attacker who replays a valid report for a different binary will pass. Fix: add a expected_measurement parameter to SEVSNPProvider and compare with hmac.compare_digest() at verification time.

Activity

  1. added
    securityThreat model, attack surface, OWASP
    track:teeTEE provider implementation
    mediumMedium severity
    on Jun 6, 2026
  2. added a commit that references this issue on Jun 7, 2026
    caa1219
  3. added a commit that references this issue on Jun 8, 2026
    ccfd6cb
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    mediumMedium severitysecurityThreat model, attack surface, OWASPtrack:teeTEE provider implementation

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions