Topic
Hardware security elements such as TPMs and secure sensors that generate keys, sign data at the source, and attest to device integrity.
Berardino Carnevale of Rambus told Lets Data Science that measured boot protects only the components inside the measurement set, and that attestation evidence settles nothing until a verification service acts on it.
Reality
Reference Image on the iPhone 18 Pro puts one signature on the sensor's raw output and a second on the developed file. The capture time it proves is only good to about 15 minutes.
Reality
Apple's Security Research post describes an image provenance chain that begins when a camera sensor is first switched on and ends with a JPEG signed by Apple's own servers. Verification teams get one camera family to work with.
Reality
The Trusted Computing Group has turned post-quantum readiness into something a purchase order can check. It also coined a label that means the part is not compliant yet.
Reality
The Trusted Computing Group's baseline is PTP 1.07, with two readiness labels and a certification tier still to come. Until that lands, verification means reading a vendor's evidence packet.
Reality