
Developed SVSM e-vTPM support in the google/go-tpm-tools repository, enabling EK-based attestation within SVSM-enabled environments. This work introduced new protocol buffers for attestation and registration, enhanced the TPM registration flow, and implemented EK-based key attestation to strengthen the attestation trust chain. Integrated SVSM-specific attest and verify commands, updated client, server, and verifier components, and wired end-to-end flows with SNP reports. Utilized Go, gRPC, and protocol buffers to deliver cross-component integration and comprehensive dependency updates. These changes established a foundation for trusted provisioning of virtualized TPMs, reducing reliance on EK certificates and improving security in attestation workflows.
November 2025: Delivered SVSM e-vTPM support in go-tpm-tools, enabling EK-based attestation under the SVSM architecture. Implemented new protocol buffers for attestation and registration, enhanced the TPM registration flow, and added EK-based key attestation for secure attestation with SVSM. Updated client/server and verifier components to accommodate SVSM attestation, and wired end-to-end flows with SNP reports. Performed comprehensive dependency updates and go tooling steps (go generate, go mod tidy) across modules. Introduced SVSM-specific attest/verify commands to support Coconut SVSM workflows. This work lays the foundation for trusted provisioning of virtualized TPMs in SVSM-enabled environments and reduces risk in attestation trust chains. Commit reference: d94cf988f2d5731919f476bda1be5641f6164e52.
November 2025: Delivered SVSM e-vTPM support in go-tpm-tools, enabling EK-based attestation under the SVSM architecture. Implemented new protocol buffers for attestation and registration, enhanced the TPM registration flow, and added EK-based key attestation for secure attestation with SVSM. Updated client/server and verifier components to accommodate SVSM attestation, and wired end-to-end flows with SNP reports. Performed comprehensive dependency updates and go tooling steps (go generate, go mod tidy) across modules. Introduced SVSM-specific attest/verify commands to support Coconut SVSM workflows. This work lays the foundation for trusted provisioning of virtualized TPMs in SVSM-enabled environments and reduces risk in attestation trust chains. Commit reference: d94cf988f2d5731919f476bda1be5641f6164e52.

Overview of all repositories you've contributed to across your timeline