Attested TLS relay attacks: what do security teams need to change?

TL;DR: A peer-reviewed TU Dresden attack on attested TLS, assigned CVE-2026-33697, exposes a timing flaw in how some protocols bind enclave evidence to a connection, enabling relay and diversion attacks without breaking confidential computing itself, according to Anjuna. The practical lesson is that attestation must govern session establishment, not race it.

Editorial analysis by NHI Mgmt Group, based on content published by Anjuna: “The Attested TLS Flaw Is Real — and It's Not What the Headline Says”.

Key questions

Q: What breaks when attested TLS evidence is generated during the handshake?

A: The binding between enclave proof and the eventual encrypted channel breaks.

Q: Why does relay risk remain even when enclave attestation is valid?

A: Because validity of the evidence only proves that a real enclave signed something, not that the proof belongs to the channel the client is using.

Q: What are the signs that attestation and channel binding are not aligned?

A: Look for designs where attestation completes before the session key exists, where the same evidence can be replayed across connections, or where a client accepts enclave proof without tying it to a unique session.

Practitioner guidance

• Audit attestation timing across all enclave connections Map whether attestation evidence is created inside the TLS handshake or before any session exists, then identify where the proof and the channel are not bound together.
• Move secret release behind successful attestation Require enclave verification before any shared secret, token, or session material is provisioned, so a relayed endpoint never receives authenticating credentials.
• Test for relay and diversion resistance Simulate a relayed challenge against your confidential computing path and confirm that the intended enclave is the only endpoint able to complete authentication.

Bottom line: The article shows that attested TLS can fail when evidence is generated too early to bind to the session it is meant to protect.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →