Skip to content

Commit 7a8a851

Browse files
committed
docs(geolocation): Add platform support note for Keylime vs client devices
Keylime is for Linux servers with TPM 2.0. Client devices use: - iOS: Apple App Attest + Secure Enclave - Android: Android Key Attestation + StrongBox - Windows: SGRM
1 parent 1ff4b89 commit 7a8a851

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

docs/auditor-privacy-preserving-geolocation.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -130,6 +130,14 @@ fn main(
130130

131131
For **absolute privacy guarantees**, the ZKP proof itself is signed by the TPM on the Keylime-attested host. This ensures the proof was generated on a specific verified server and cannot be replayed from elsewhere.
132132

133+
> [!NOTE]
134+
> **Platform Support:** Keylime is designed for **Linux servers** with TPM 2.0. For **client devices** (iOS, Android, Windows), alternative attestation components are used:
135+
> - **iOS:** Apple App Attest + Secure Enclave
136+
> - **Android:** Android Key Attestation + StrongBox
137+
> - **Windows:** SGRM (System Guard Runtime Monitor)
138+
>
139+
> See **[Unified Identity Framework](../hybrid-cloud-poc/README-arch-sovereign-unified-identity.md)** for cross-platform attestation details.
140+
133141
```
134142
┌─────────────────────────────────────────────────────────────────────────┐
135143
│ TPM-SIGNED ZKP OUTPUT (KEYLIME AGENT PLUGIN) │

0 commit comments

Comments
 (0)