System, apparatus and method for privacy preserving distributed attestation for devices

A system comprising:

• a processor to execute in a trusted execution environment (TEE), the processor to receive a plurality of attestation reports in a plurality of attestation sessions from a plurality of reporting nodes of a first network including a plurality of nodes, each of the plurality of attestation sessions in the corresponding reporting node based on a common random seed value used to form a Diffie-Hellman exponent that is common among the plurality of reporting nodes, determine whether at least a threshold number of the plurality of attestation sessions produce identical attestation reports, responsive to at least the threshold number of the plurality of attestation sessions providing the identical attestation reports, decrypt the plurality of attestation reports, process the decrypted plurality of attestation reports to obtain aggregated telemetry data of the plurality of nodes, and enforce a security policy based at least in part on the aggregated telemetry data, wherein an identity of the plurality of nodes is to remain anonymous to the system.