Protection Environment for Attestation and Sealing Using a Device Identifier Composition Engine

A computing device, comprising:

• one or more processors;
• and
• data storage, wherein the data storage has stored thereon computer-executable instructions that, when executed by the one or more processors, cause the computing device to carry out functions comprising:
• receiving, by a secure component and from a client computing device via a secure communication channel, input data for a task associated with the client computing device, wherein the task is based on a device identifier composition engine (DICE) protocol, and wherein the secure component is to perform a cryptographic subtask of the task;
• receiving, by the secure component and from the client computing device via the secure communication channel, context data associated with the cryptographic subtask;
• executing, by the secure component, the cryptographic subtask based on the input data and the context data;
• and
• providing, by the secure component and to the client computing device via the secure communication channel, an output of the cryptographic subtask.

An article of manufacture comprising one or more non-transitory computer readable media having computer-readable instructions stored thereon that, when executed by one or more processors of a computing device, cause the computing device to carry out functions comprising:

• receiving, by a secure component and from a client computing device via a secure communication channel, input data for a task associated with the client computing device, wherein the task is based on a device identifier composition engine (DICE) protocol, and wherein the secure component is to perform a cryptographic subtask of the task;
• receiving, by the secure component and from the client computing device via the secure communication channel, context data associated with the cryptographic subtask;
• executing, by the secure component, the cryptographic subtask based on the input data and the context data;
• and
• providing, by the secure component and to the client computing device via the secure communication channel, an output of the cryptographic subtask.