Cross-attestation of electronic devices

A non-transitory machine-readable storage medium associated with a verifier, wherein the storage medium to store instructions that, when executed by the machine, cause the machine to:

• challenge a first electronic device of a plurality of electronic devices of a network;
• in response to the challenge of the first electronic device:
• receive, from the first electronic device, first data signed by a security component of the first electronic device and representing content stored in the security component of the first electronic device;
• and
• receive, from the first electronic device, second data signed by the security component of the first electronic device and representing an authenticated digest provided to the first electronic device by a second electronic device of the plurality of devices, wherein the authenticated digest represents content stored in a security component of the second electronic device and is signed by the security component of the second electronic device;
• and
• evaluate a condition of the network based on the first and second data.

A system comprising:

• a plurality of devices and a verifier, wherein the plurality of devices comprises a first electronic device having a security co-processor and a second electronic device having a security co-processor;
• and
• wherein the verifier to:
• provide a first attestation request to the first electronic device;
• in response to the first attestation request, receive, from the first electronic device, first data representing a first authenticated digest from the first electronic device representing content stored in the security co-processor of the first electronic device and second data representing a second authenticated digest stored by the first electronic device and provided to the first electronic device by the second electronic device in response to a second attestation request provided by the first electronic device to the second electronic device, wherein the second attestation request preceded the first attestation request;
• and
• determine whether the second electronic device has been subject to an event based on the first and second data.