Enclave PCR Verification
Compare the PCR values shown in your VettID app against our official published values. If they match, you're communicating with an authentic VettID enclave.
Current PCR Values
ActiveWhat are PCR values?
PCRs (Platform Configuration Registers) are cryptographic measurements generated by AWS Nitro Enclaves. They uniquely identify the exact code running inside the enclave.
- PCR0 - Hash of the enclave image (changes with any code update)
- PCR1 - Hash of the Linux kernel and bootstrap
- PCR2 - Hash of the application code
These values are generated by AWS hardware and cannot be faked. If the PCRs in your app match the values shown here, you can be confident you're communicating with authentic VettID infrastructure.
How to verify
Open the VettID app
Go to Settings > Security > Enclave Verification
View the PCR values
The app displays the PCR0 value from the last attestation
Compare with this page
The PCR0 value should match one of the values shown above (current or previous during updates)
If they don't match
Do not proceed. Contact support@vettid.dev immediately.
Scan to open this page on your phone
Or visit vettid.dev/pcr
Technical Details
PCR values are fetched from our signed manifest at /attestation/pcr-manifest.
The manifest is signed with VettID's ECDSA P-256 key, and the signature is verified by your app
before trusting the values.
During enclave updates, both current and previous PCR values are valid for a transition period (typically 48 hours). This ensures uninterrupted service during rolling deployments.
For developers: See our PCR Handling Guide for complete technical documentation.