A computing system, comprising: a processor; and a memory communicatively coupled to the processor, storing instructions that when executed by the processor, cause the computing system to perform the following operations: receiving a request for protected data from a potentially untrusted requestor associated with a trusted execution environment, TrEE, , and an attestation statement of the TrEE, wherein the attestation statement binds an identity of the requestor to the attestation statement; retrieving the protected data; obtaining a public targeting key of the TrEE from at least one of the request or the attestation statement, wherein the obtaining the public targeting key comprises identifying an encryption key associated with a secure kernel of the requestor, wherein the encryption key is further associated with a TrEE session ID and a TrEE type; generating targeted protected data by encrypting the protected data with the public targeting key; and providing the targeted protected data to the potentially untrusted requestor, wherein a private targeting key of the TrEE corresponding to the public targeting key of the TrEE is required to decrypt the targeted protected data. a processor; and a memory communicatively coupled to the processor, storing instructions that when executed by the processor, cause the computing system to perform the following operations: receiving a request for protected data from a potentially untrusted requestor associated with a trusted execution environment, TrEE, , and an attestation statement of the TrEE, wherein the attestation statement binds an identity of the requestor to the attestation statement; retrieving the protected data; obtaining a public targeting key of the TrEE from at least one of the request or the attestation statement, wherein the obtaining the public targeting key comprises identifying an encryption key associated with a secure kernel of the requestor, wherein the encryption key is further associated with a TrEE session ID and a TrEE type; generating targeted protected data by encrypting the protected data with the public targeting key; and providing the targeted protected data to the potentially untrusted requestor, wherein a private targeting key of the TrEE corresponding to the public targeting key of the TrEE is required to decrypt the targeted protected data. receiving a request for protected data from a potentially untrusted requestor associated with a trusted execution environment, TrEE, , and an attestation statement of the TrEE, wherein the attestation statement binds an identity of the requestor to the attestation statement; retrieving the protected data; obtaining a public targeting key of the TrEE from at least one of the request or the attestation statement, wherein the obtaining the public targeting key comprises identifying an encryption key associated with a secure kernel of the requestor, wherein the encryption key is further associated with a TrEE session ID and a TrEE type; generating targeted protected data by encrypting the protected data with the public targeting key; and providing the targeted protected data to the potentially untrusted requestor, wherein a private targeting key of the TrEE corresponding to the public targeting key of the TrEE is required to decrypt the targeted protected data. <EOS>