Each platform has its own word for attestation evidence. A report is often local, a quote is signed for remote use, and a token usually carries a verifier's result.
| Platform | Evidence is called | Signed by |
|---|---|---|
| Intel SGX | Report (local), quote (remote) | Report: a key shared on the same machine. Quote: a quoting enclave |
| Intel TDX | TD report, TD quote | The processor, then a quoting enclave |
| AMD SEV-SNP | Attestation report | The AMD secure processor |
| Arm CCA | CCA token (platform token and realm token) | Platform and realm attestation keys |
| TPM | Quote | An attestation key in the TPM |
| AWS Nitro Enclaves | Attestation document | The Nitro hypervisor |
| After verification | Attestation result or token | The verifier |
The words differ. The structure is the same: measurements, a freshness value from the party who asked, and a signature rooted in hardware.
In Intel SGX the difference between report and quote is practical. A report can only be checked on the same machine. To send it elsewhere, a quoting enclave checks the report locally and signs it as a quote.
Attested AIAttested cloud workloads
Working on re-attestation for your product? A first call takes 30 minutes and commits you to nothing. Bring your product and the one question that worries you.
Next fixed date: EU Digital Identity Wallets are due in every member state on 24 December 2026, 42 days from now.