Resolve the unreproduced Intel TDX Secret Network measurements

Determine why three of the additional Intel TDX measurement registers for Secret Network do not match between the released and locally built artifacts, and establish a procedure that achieves complete reproducibility of the TDX measurement.

Background

The paper reports that Secret Network offers reproducibility support for its AMD SEV-SNP and Intel TDX deployments. The authors successfully reproduced the SEV-SNP measurement, but only partially reproduced the TDX measurements: the initial virtual-machine measurement and one additional register matched, whereas three additional registers did not.

The authors considered whether incomplete instructions for retrieving the measurements might explain the discrepancy, but regarded that explanation as unlikely because the same command was used for both the released and locally built artifacts. The issue remained unresolved because the developers did not respond.

References

At the time of writing, the issue remains unresolved, as we did not receive a response from the developers.

— "They don't care about this": A Systematic Study of TEE Build Reproducibility in the Wild  (2609.11411 - Wilde et al., 10 Sep 2026) in Section 3.2, Case Studies, paragraph “Secret Network” (Section label sec:secret_network)

According to the developers, some dependencies required for full reproducibility remain unknown, making reproduction infeasible.

— "They don't care about this": A Systematic Study of TEE Build Reproducibility in the Wild  (2609.11411 - Wilde et al., 10 Sep 2026) in Section 3.2, Case Studies, paragraph “Gramine and Ternoa” (Section label sec:gramine_ternoa)